A company is migrating applications from an on-premises Microsoft Active Directory that the company manages to AWS. The company deploys the applications in multiple AWS accounts. The company uses…

Question

Options

• ACreate an Enterprise Edition Active Directory in AWS Directory Service for Microsoft Active
• BEnable AWS IAM Identity Center. Configure a two-way forest trust relationship to connect the
• CUse AWS Directory Service and create a two-way trust relationship with the company's self-
• DDeploy an identity provider (IdP) on Amazon EC2. Link the IdP as an identity source within AWS

• A
  14% (5)
• B
  75% (27)
• C
  3% (1)
• D
  8% (3)

Explanation

The company is looking for a solution that provides single sign-on (SSO) across multiple AWS accounts while continuing to manage users and groups in their on-premises Active Directory (AD). AWS IAM Identity Center (formerly AWS SSO) is the recommended solution for this type of AWS IAM Identity Centerprovides a centralized identity management solution, enabling single sign-on across multiple AWS accounts and other cloud applications. It can integrate with on- premises Active Directory to leverage existing users and groups. By configuring a two-way forest trust relationship between AWS Directory Service for Microsoft Active Directory and the company's on-premises Active Directory, users can be authenticated by their on-premises AD and still access AWS resources through IAM Identity Center. This solution allows centralized management of AWS accounts within AWS Organizations. The two-way trust allows mutual access between the on-premises AD and the AWS Directory Service. This means that users and groups in the on-premises AD can be used for authentication in AWS IAM Identity Center while maintaining the existing identity management system.

No community discussion yet for this question.