SAA-C03 Question #528: Real Exam Question with Answer & Explanation

Question

A company uses an organization in AWS Organizations to manage a multi-account landing zone. The company requires all users who access AWS accounts in the organization to use a centralized identity system that follows the principle of least privilege for operational tasks. The company currently uses an external identity provider (IdP). Which combination of solutions will meet these requirements? (Select TWO.)

Options

• AUse AWS Identity and Access Management (IAM) to create IAM users and IAM user groups in
• BCreate permission sets in AWS IAM Identity Center. Assign the appropriate permission sets to the
• CAssign each IAM user to an IAM role by using an inline IAM policy based on operational duties.
• DConfigure a SAML identity provider in AWS Identity and Access Management (IAM) in each AWS
• EEnable AWS IAM Identity Center in the organization management account. Create user accounts