A company uses AWS Organizations. The company wants to implement short-term credentials for third-party AWS accounts to use to access accounts within the company's organization. Access is for the AWS Management Console and third-party software-as-a-service (SaaS) applications. Trust must be enhanced to prevent two external accounts from using the same credentials. The solution must require the least possible operational effort. Which solution will meet these requirements?

Question

Accepted Answer

D. Create a unique IAM role for each external account. Create a trust policy that includes a condition

Answer

A. Use a bearer token authentication with OAuth or SAML to manage and share a central Amazon

Answer

B. Implement AWS IAM Identity Center (AWS Single Sign-On), and use an identity source of choice.

Answer

C. Create a unique IAM role for each external account. Create a trust policy Use AWS Secrets

A company uses AWS Organizations. The company wants to implement short-term credentials for third-party AWS accounts to use to access accounts within the company's organization. Access is for the…

Question

Options

How the community answered

Explanation

Topics

Community Discussion