AWS Certified Solutions Architect Associate SAA-C03 Practice Question
A company utilizes a centralized system for user credentials and seeks to grant employees the ability to utilize these same credentials to perform job-specific tasks within their cloud environment. What is the recommended solution to link the company's current system with the cloud services, allowing role assignment based on existing job functions?
Deploy a connector that interfaces with the existing credentials directory and assign cloud user profiles to authenticate against it.
Construct individual user profiles in the cloud directory service and execute a periodic sync for credentials from the existing on-premises system.
Amend the trust configurations in the centralized directory to directly accept authentication requests from the cloud directory service.
Enable a connectivity channel such as a VPN between the on-premises network and cloud network, controlling access through network routing and policies.
Implement a service like AWS IAM Identity Center to establish a trust relationship between the centralized credentials system and the cloud provider, permitting role mapping accordingly.
The recommended approach for integrating a centralized directory service with the cloud provider for access management is to use a service designed for identity federation, such as AWS IAM Identity Center, which allows the assignment of cloud roles to on-premises identities. Other suggested methods either do not offer direct federation with directory services or do not follow the best practices for integrating existing user credentials with cloud resources.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is AWS IAM Identity Center and how does it work?
Open an interactive chat with Bash
What is identity federation and why is it important?
Open an interactive chat with Bash
What are the risks of constructing individual user profiles in the cloud directory service?