DEA-C01 Question 435
Single answerA data engineering team is setting up an Amazon Redshift cluster for their analytics workload. They need to ensure secure authentication for users connecting to the cluster. The company has implemented AWS Single Sign-On (AWS SSO) for managing identities across the organization. Which of the following authentication methods should they use to integrate with AWS SSO?
- A
Password-based authentication using Amazon Redshift credentials
- B
Certificate-based authentication using SSL/TLS certificates
- C
Role-based authentication using IAM roles and federated users
- D
Hardcoded credentials stored in an S3 bucket
Show answer and explanation
Correct answer: C
Explanation
To integrate Amazon Redshift with AWS SSO for secure authentication, the best approach is to use role-based authentication with IAM roles and federated users. This allows the company to leverage AWS SSO for centralized identity and access management, eliminating the need for managing separate credentials or certificates while maintaining best practices for security.
- A. Incorrect.
Password-based authentication is not integrated with AWS SSO and would require users to manage separate credentials, which is not ideal in this scenario.
- B. Incorrect.
Certificate-based authentication ensures secure communication but does not integrate with AWS SSO for identity federation.
- C. Correct.
Role-based authentication is the correct method as it allows integration with AWS SSO by setting up IAM roles for federated users, enabling secure and centralized identity management.
- D. Incorrect.
Hardcoding credentials is not only a security risk but also does not align with AWS best practices or support integration with AWS SSO.