A company is onboarding a new team of systems engineers who need access to administrative and monitoring resources in the AWS Management Console. The solutions architect wants to configure access to the AWS environment in alignment with AWS security best practices.
Which TWO actions should the solutions architect take to meet these requirements?
- Configure AWS IAM Identity Center to federate the developers' corporate identities and manage permissions using permission sets.Cevap
- Enable multi-factor authentication (MFA) on all accounts, secure the AWS account root user credentials, and restrict its usage to root-only tasks.Cevap
- CCreate individual IAM users with long-term access keys for each developer to access the AWS Management Console daily.
- DUse the AWS account root user credentials for daily administrative and development tasks to simplify resource management.
- EStore application credentials as plaintext String parameters in Systems Manager Parameter Store for easy retrieval by developers.
Cevap
The correct actions are to configure AWS IAM Identity Center for federated identity access, and to enable multi-factor authentication (MFA) while securing the AWS account root user credentials.
Federating user identities via AWS IAM Identity Center eliminates the need to manage individual long-term IAM user credentials, which aligns with AWS best practices for human access. Additionally, protecting the AWS account root user by enabling MFA and avoiding its use for daily administrative tasks ensures secure foundation access.
Adım Adım Çözüm
Anahtar Kavram
AWS IAM Security Best Practices including identity federation and root account protection
Tahmini Süre:1m 0s