SCS-C02 Question 291
Single answerAn organization wants to provide its employees with seamless access to both AWS Management Console and other corporate applications using their existing corporate credentials. They also require centralized management of user permissions across multiple AWS accounts. Which AWS service or combination of services should they use to achieve this?
- A
AWS Identity and Access Management (IAM)
- B
AWS IAM Identity Center (AWS Single Sign-On)
- C
Amazon Cognito
- D
AWS Directory Service
Show answer and explanation
Correct answer: B
Explanation
The correct answer is AWS IAM Identity Center (AWS Single Sign-On) because it provides features like centralized user management, integration with corporate identity providers, and seamless single sign-on access for employees to both AWS Management Console and other corporate applications. Other services like IAM, Amazon Cognito, and AWS Directory Service do not meet all the requirements outlined in this scenario.
- A. Incorrect.
AWS Identity and Access Management (IAM) is primarily used for managing permissions and policies for AWS resources. While it supports user creation and role-based access, it does not provide seamless integration with corporate credentials or centralized user management across multiple AWS accounts.
- B. Correct.
AWS IAM Identity Center (AWS Single Sign-On) is specifically designed for this scenario. It allows users to sign in with their corporate credentials, provides centralized management of access permissions across AWS accounts, and integrates with other corporate applications.
- C. Incorrect.
Amazon Cognito is used for creating and managing customer-facing identities for web or mobile applications. It is not designed for managing employee access to AWS resources or corporate applications.
- D. Incorrect.
AWS Directory Service is a managed directory service that enables integration with Active Directory, but it does not provide centralized management of user permissions across multiple AWS accounts or seamless SSO for corporate applications.