100-140 Question 134
Single answerA company is setting up a cloud-based application that requires secure authentication for its employees. The IT team must decide between using Entra ID (formerly Azure AD) or AWS IAM for managing user identities and permissions. In which scenario would AWS IAM be the most appropriate choice?
- A
When hosting applications in AWS to manage user access and permissions.
- B
When using Microsoft 365 services for employee productivity.
- C
When requiring single sign-on (SSO) for third-party SaaS applications.
- D
When managing on-premises Windows domain resources.
Show answer and explanation
Correct answer: A
Explanation
AWS IAM is a cloud-based identity and access management service specific to AWS. It is ideal for managing identities, permissions, and access for applications and resources hosted in AWS. In contrast, Entra ID is more suited for Microsoft services and third-party SaaS applications, and on-premises Active Directory is used for managing Windows domain resources.
- A. Correct.
AWS IAM is designed to manage access and permissions for resources hosted specifically on the AWS cloud platform, making it the best choice for applications hosted in AWS.
- B. Incorrect.
Entra ID (Azure AD) is better suited for Microsoft 365 services as it is tightly integrated with Microsoft's ecosystem.
- C. Incorrect.
Entra ID provides robust single sign-on (SSO) capabilities for third-party SaaS applications, making it a better fit for this requirement.
- D. Incorrect.
Active Directory (on-premises AD) is typically used for managing Windows domain resources, not AWS IAM.