SCS-C02 · Question #293
A company is outsourcing its operational support to an external company. The company's security officer must implement an access solution fen delegating operational support that minimizes overhead…
The correct answer is B. Federate AWS identity and Access Management (IAM) with the external company's identity. To create a role for identity federation (AWS CLI) Create a role: aws iam create-role Attach a permissions policy to the role: aws iam attach-role-policy Create an inline permissions policy for the role: aws iam put-role-policy…
Question
A company is outsourcing its operational support to an external company. The company's security officer must implement an access solution fen delegating operational support that minimizes overhead. Which approach should the security officer take to meet these requirements?
Options
- Aimplement Amazon Cognito identity pools with a role that uses a policy that denies the actions
- BFederate AWS identity and Access Management (IAM) with the external company's identity
- CCreate an IAM group for me external company
- DUse AWS SSO with the external company's identity provider.
How the community answered
(16 responses)- A19% (3)
- B69% (11)
- C6% (1)
- D6% (1)
Explanation
To create a role for identity federation (AWS CLI) Create a role: aws iam create-role Attach a permissions policy to the role: aws iam attach-role-policy Create an inline permissions policy for the role: aws iam put-role-policy https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp.html
Topics
Community Discussion
No community discussion yet for this question.