SAP-C02 · Question #310
A financial company with multiple departments wants to expand its on-premises environment to the AWS Cloud. The company must retain centralized access control using an existing on- premises Active…
The correct answer is B. Deploy an AWS Control Tower landing zone. Create an AD Connector linked to the on-premises. AWS Control Tower automates the setup of a new landing zone using best-practices blueprints for identity, federated access, and account structure. The account factory automates provisioning of new accounts in your organization. As a configurable account template, it helps you…
Question
A financial company with multiple departments wants to expand its on-premises environment to the AWS Cloud. The company must retain centralized access control using an existing on- premises Active Directory (AD) service. Each department should be allowed to create AWS accounts with preconfigured networking and should have access to only a specific list of approved services. Departments are not permitted to have account administrator permissions. What should a solutions architect do to meet these security requirements?
Options
- AConfigure AWS Identity and Access Management (IAM) with a SAML identity provider (IdP) linked
- BDeploy an AWS Control Tower landing zone. Create an AD Connector linked to the on-premises
- CDeploy an Amazon Cloud Directory.
- DConfigure AWS Directory Service for Microsoft Active Directory with AWS Single Sign-On.
How the community answered
(33 responses)- A21% (7)
- B64% (21)
- C6% (2)
- D9% (3)
Explanation
AWS Control Tower automates the setup of a new landing zone using best-practices blueprints for identity, federated access, and account structure. The account factory automates provisioning of new accounts in your organization. As a configurable account template, it helps you standardize the provisioning of new accounts with pre-approved account configurations. You can configure your account factory with pre-approved network configuration and region selections. https://aws.amazon.com/controltower/features/
Community Discussion
No community discussion yet for this question.