Home › AWS Security › cloudcomputing › scsinfraiam › Which AWS service federates corporate identities…
Which AWS service federates corporate identities (Active Directory, Okta, Azure AD) into AWS for human users across many accounts — replacing per-account IAM users?
AHardcoded IAM users per account
BSharing the root password
CDisabling MFA
DIAM Identity Center (formerly AWS SSO)
Answer & Solution
Correct answer: D. IAM Identity Center (formerly AWS SSO)
IAM Identity Center federates external IdPs (per SCS-C02 §4.1). The other options are anti-patterns.
Related questions
Which IAM feature lets an architect cap the MAXIMUM permissions an entity (user/role) can Which AWS service is the customer-identity-and-access-management (CIAM) service for consumWhich AWS service is the canonical identity store for managing IAM users, roles, groups, aWhich AWS feature lets a security engineer trace whether traffic from a source ENI to a deWhich AWS service is the managed stateful firewall for VPC traffic — supporting Suricata-cWhich AWS service provides centralised firewall management — deploying WAF rules, Shield AWhich AWS networking primitive is STATELESS, attached at the subnet level, supports both aWhich AWS networking primitive is STATEFUL, lives at the ENI level, allows traffic by allo