Examkin

Question

Difficulty: EasyMulti-Account Management and Governance

An enterprise is consolidating its billing and resource management under AWS Organizations. The security team wants to establish centralized access control so that employees can sign in using their existing corporate credentials and access their assigned AWS accounts without managing separate passwords. Which of the following is the most secure and operationally efficient method to achieve this goal?

  1. Configure AWS IAM Identity Center integrated with the enterprise's corporate identity provider.Answer
  2. B
    Create individual IAM users with long-term credentials in each member account for every employee.
  3. C
    Distribute the AWS account root user credentials of each member account to the respective employees.
  4. D
    Generate a single administrative IAM user in the management account and share the credentials with all employees.

Answer

Configure AWS IAM Identity Center integrated with the enterprise's corporate identity provider.
The correct option is configuring AWS IAM Identity Center integrated with the enterprise's corporate identity provider. This approach centralizes permissions management and integrates directly with the existing corporate identity store, eliminating the need to manage individual IAM credentials in multiple member accounts.

Step-by-Step Solution

1
Identify the primary requirement.
The requirement is to implement centralized identity federation and cross-account access management without using separate credentials for each AWS account.
This establishes the scope of the solution as multi-account identity and governance.
2
Evaluate the solutions against AWS best practices.
AWS IAM Identity Center is the native AWS service designed to handle centralized user federation and permission management across accounts within AWS Organizations.
This identifies the correct service matching the goals.
3
Eliminate options that rely on long-term or shared credentials.
Creating local IAM users or distributing root user credentials increases operational overhead and security risk, which fails the requirement.
Ensures the selected option is the most secure and operationally efficient.

Key Concept

Centralized multi-account access control via AWS IAM Identity Center
Estimated Time:45s
Rate this question

Topics

Multi-Account Management and Governance

More questions from this topic