A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications. Wh

Question

Options

• AAWS Audit Manager
• BAmazon Cognito
• CAWS Security Hub
• DAWS IAM Identity Center (AWS Single Sign-On)

• A
  3% (1)
• B
  3% (1)
• D
  94% (32)

Explanation

AWS IAM Identity Center (AWS Single Sign-On) is specifically designed to centrally manage workforce user identities and provide single sign-on access across multiple AWS accounts and business applications from one place, making it the perfect fit for this scenario. It allows administrators to create users, assign permissions, and control access to all AWS accounts within an AWS Organization through a single management interface.

Why the distractors are wrong:

• A. AWS Audit Manager is used to continuously audit AWS usage to simplify risk and compliance assessments - it has nothing to do with managing user sign-in or access.
• B. Amazon Cognito is designed for customer-facing (external) application authentication (e.g., app users logging into your website), not for managing internal workforce users across AWS accounts.
• C. AWS Security Hub aggregates and prioritizes security findings across AWS services - it's a security posture tool, not an identity management service.

Memory Tip: Think of IAM Identity Center as the "corporate HR system" for AWS - it handles your internal employees (workforce), giving them one login to access everything across all your AWS accounts. If the question mentions workforce, employees, multiple AWS accounts, or centralized access, IAM Identity Center is almost always the answer. Reserve Cognito for customers/external users of your applications.

No community discussion yet for this question.