A company wants to grant its on-premises Active Directory users access to the AWS Management Console. The solutions architect needs to configure identity federation using AWS IAM Identity Center to allow users to sign in with their existing corporate credentials.
Which two actions must the solutions architect perform to establish this integration? (Select TWO.)
- Connect the on-premises Active Directory to AWS using AD Connector.Answer
- Enable AWS IAM Identity Center and configure the identity source to use the connected directory.Answer
- CCreate individual IAM users with long-term credentials for each Active Directory user in AWS IAM.
- DDistribute the AWS account root user credentials to the corporate Active Directory administrators.
Answer
Connect the on-premises Active Directory to AWS using AD Connector, and enable AWS IAM Identity Center to use the connected directory as the identity source.
To integrate an on-premises Active Directory with AWS for federated access, the solutions architect must connect the on-premises directory to AWS (e.g., using AD Connector) and configure AWS IAM Identity Center to use that directory as the identity source. This allows users to authenticate using their existing corporate credentials without storing credentials in the AWS cloud.
Step-by-Step Solution
Key Concept
Federating an on-premises Active Directory with AWS IAM Identity Center using AD Connector to allow single sign-on without creating individual IAM users.
Estimated Time:1m 0s