CLF-C02 Question 115
Single answerA company wants to enable its employees to access AWS resources using their existing corporate login credentials from Microsoft Active Directory. Which AWS service or feature should they use to achieve this?
- A
AWS Identity and Access Management (IAM) roles with web identity federation
- B
AWS Directory Service for Microsoft Active Directory
- C
AWS Single Sign-On (AWS SSO)
- D
Amazon Cognito Identity Pools
Show answer and explanation
Correct answer: B
Explanation
To enable employees to use their existing corporate login credentials from Microsoft Active Directory to access AWS resources, the appropriate service is AWS Directory Service for Microsoft Active Directory. This service enables seamless integration with on-premises Active Directory environments, allowing users to authenticate using their existing credentials.
- A. Incorrect.
IAM roles with web identity federation are used to grant temporary access to AWS resources for users authenticated by third-party identity providers, such as Facebook or Google, but not specifically for integrating corporate Active Directory credentials.
- B. Correct.
AWS Directory Service for Microsoft Active Directory allows seamless integration with on-premises Microsoft Active Directory, enabling employees to use their existing corporate credentials to access AWS resources.
- C. Incorrect.
AWS Single Sign-On (AWS SSO) provides centralized access to AWS accounts and applications, but it does not directly integrate with Microsoft Active Directory. It is more suitable for managing multiple AWS accounts or applications.
- D. Incorrect.
Amazon Cognito Identity Pools are used for managing user identity for applications, primarily focused on mobile and web application users, rather than corporate employee logins.