Which technique can be used to integrate AWS IAM (Identity and Access Management) with an on- premise LDAP (Lightweight Directory Access Protocol) directory service?

Question

Options

• AUse an IAM policy that references the LDAP account identifiers and the AWS credentials.
• BUse SAML (Security Assertion Markup Language) to enable single sign-on between AWS and
• CUse AWS Security Token Service from an identity broker to issue short-lived AWS credentials.
• DUse IAM roles to automatically rotate the IAM credentials when LDAP credentials are updated.

• A
  4% (1)
• B
  70% (16)
• C
  17% (4)
• D
  9% (2)

Explanation

On the AWS Blog site the following information is present to help on this context The newly released whitepaper. Single Sign-On: Integrating AWS, OpenLDAP, and Shibboleth, will help you integrate your existing LDAP-based user directory with AWS. When you integrate your existing directory with AWS, your users can access AWS by using their existing credentials. This means that your users don't need to maintain yet another user name and password just to access AWS OptionE. C and D are all invalid because in this sort of configuration, you have to use SAML to enable single sign on. https://aws.amazon.eom/blogs/security/new-whitepaper-sinEle-sign-on-inteErating-aws- openldap-and-shibboleth/

No community discussion yet for this question.