Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A corporation uses an external identity provider (IdP) to manage its workforce identities. A solutions architect must configure access to the AWS Management Console for 200200 developers. Which strategy aligns with AWS security best practices to grant this access?

  1. Configure identity federation using AWS IAM Identity Center to allow the developers to sign in using their existing corporate credentials.Answer
  2. B
    Create individual IAM users in the AWS account for each of the 200200 developers and configure password policies for console access.
  3. C
    Provide the developers with the AWS account root user credentials to ensure they have all necessary permissions to perform their tasks.
  4. D
    Create a single shared IAM user with administrator access and distribute the access keys in a plaintext text file on a shared network drive.

Answer

Configure identity federation using AWS IAM Identity Center to leverage existing corporate credentials and centralize management.
Configuring identity federation using AWS IAM Identity Center allows developers to sign in with their existing corporate credentials. This approach centralizes access management, avoids the creation of long-term credentials like IAM passwords or access keys, and scales efficiently as the organization grows.

Step-by-Step Solution

1
Analyze the request: grant AWS console access to 200200 developers already managed in an external corporate identity provider.
Identified that managing 200200 local IAM users manually is inefficient and insecure compared to federating the existing identity provider.
AWS security best practices advocate for federated access over creating long-term IAM credentials for workforce users.
2
Select AWS IAM Identity Center as the correct AWS service for managing SSO access to AWS accounts.
Developers can log in with their corporate credentials without new IAM users being generated.
AWS IAM Identity Center simplifies access management by delegating authentication to the corporate IdP.

Key Concept

Workforce identity federation is the AWS-recommended method for granting corporate directory users access to AWS resources, minimizing credential management overhead.
Estimated Time:45s
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic