SCS-C02 Question 288
Single answerAn organization wants to centralize access management for its employees across multiple AWS accounts and applications, while also allowing integration with their existing Microsoft Active Directory (AD). Which AWS service should the organization use to meet these requirements?
- A
AWS IAM Identity Center (AWS Single Sign-On)
- B
Amazon Cognito
- C
AWS Identity and Access Management (IAM)
- D
AWS Directory Service
Show answer and explanation
Correct answer: A
Explanation
AWS IAM Identity Center (AWS Single Sign-On) is specifically designed to centralize identity and access management across multiple AWS accounts and applications. It integrates with existing identity providers, such as Microsoft Active Directory, enabling organizations to use their existing credentials for authentication. None of the other listed services provide this combination of centralized access control and external identity provider integration.
- A. Correct.
AWS IAM Identity Center (AWS Single Sign-On) is the correct service for centralizing access management across multiple AWS accounts and third-party applications. It integrates seamlessly with existing identity providers like Microsoft Active Directory.
- B. Incorrect.
Amazon Cognito is designed for managing authentication and user pools for web and mobile applications, but it is not suited for centrally managing access across multiple AWS accounts or integrating directly with Microsoft Active Directory.
- C. Incorrect.
AWS Identity and Access Management (IAM) is used for managing permissions and access within a single AWS account. It does not provide centralized identity management across multiple accounts or native integration with external providers like AD.
- D. Incorrect.
AWS Directory Service provides managed Microsoft Active Directory and acts as a directory service, but it does not offer centralized access management for multiple AWS accounts or applications.