A company has several workloads running on AWS. Employees are required to authenticate using on-premises ADFS and SSO to access the AWS Management Console. Developers migrated an existing legacy web application to an Amazon EC2 instance. Employees need to access this application from anywhere on the internet, but currently, there is no authentication system built into the application. How should the security engineer implement employee-only access to this system without changing the application?

Question

Accepted Answer

A. Place the application behind an Application Load Balancer (ALB). Use Amazon Cognito as

Answer

B. Implement AWS IAM Identity Center (AWS Single Sign-On) in the management account and link

Answer

C. Define an Amazon Cognito identity pool, then install the connector on the Active Directory server.

Answer

D. Create an AWS Lambda custom authorizer as the authenticator for a reverse proxy on Amazon

A company has several workloads running on AWS. Employees are required to authenticate using on-premises ADFS and SSO to access the AWS Management Console. Developers migrated an existing legacy web…

Question

Options

How the community answered

Explanation

Topics

Community Discussion