Examkin

Soru

Zorluk: KolayMulti-Account Management and Governance

An enterprise is consolidating its billing and resource management under AWS Organizations. The security team wants to establish centralized access control so that employees can sign in using their existing corporate credentials and access their assigned AWS accounts without managing separate passwords. Which of the following is the most secure and operationally efficient method to achieve this goal?

  1. Configure AWS IAM Identity Center integrated with the enterprise's corporate identity provider.Cevap
  2. B
    Create individual IAM users with long-term credentials in each member account for every employee.
  3. C
    Distribute the AWS account root user credentials of each member account to the respective employees.
  4. D
    Generate a single administrative IAM user in the management account and share the credentials with all employees.

Cevap

Configure AWS IAM Identity Center integrated with the enterprise's corporate identity provider.
The correct option is configuring AWS IAM Identity Center integrated with the enterprise's corporate identity provider. This approach centralizes permissions management and integrates directly with the existing corporate identity store, eliminating the need to manage individual IAM credentials in multiple member accounts.

Adım Adım Çözüm

1
Identify the primary requirement.
The requirement is to implement centralized identity federation and cross-account access management without using separate credentials for each AWS account.
This establishes the scope of the solution as multi-account identity and governance.
2
Evaluate the solutions against AWS best practices.
AWS IAM Identity Center is the native AWS service designed to handle centralized user federation and permission management across accounts within AWS Organizations.
This identifies the correct service matching the goals.
3
Eliminate options that rely on long-term or shared credentials.
Creating local IAM users or distributing root user credentials increases operational overhead and security risk, which fails the requirement.
Ensures the selected option is the most secure and operationally efficient.

Anahtar Kavram

Centralized multi-account access control via AWS IAM Identity Center
Tahmini Süre:45s
Bu soruyu puanla

Konular

Multi-Account Management and Governance

Bu konudan daha fazla soru