SCS-C02 · Question #346
A company wishes to enable Single Sign On (SSO) so its employees can login to the management console using their corporate directory identity. Which steps below are required as part of the process?…
The correct answer is A. Create a Direct Connect connection between on-premise network and AWS. Use an AD E. Create an IAM role that establishes a trust relationship between IAM and the corporate directory. Create a Direct Connect connection so that corporate users can access the AWS account Option B is incorrect because IAM policies are not directly mapped to group memberships in the corporate directory. It is IAM roles which are mapped. Option C is incorrect because Lambda…
Question
A company wishes to enable Single Sign On (SSO) so its employees can login to the management console using their corporate directory identity. Which steps below are required as part of the process? Select 2 answers from the options given below.
Options
- ACreate a Direct Connect connection between on-premise network and AWS. Use an AD
- BCreate IAM policies that can be mapped to group memberships in the corporate directory.
- CCreate a Lambda function to assign IAM roles to the temporary security tokens provided to the
- DCreate IAM users that can be mapped to the employees' corporate identities
- ECreate an IAM role that establishes a trust relationship between IAM and the corporate directory
How the community answered
(33 responses)- A82% (27)
- B12% (4)
- C3% (1)
- D3% (1)
Explanation
Create a Direct Connect connection so that corporate users can access the AWS account Option B is incorrect because IAM policies are not directly mapped to group memberships in the corporate directory. It is IAM roles which are mapped. Option C is incorrect because Lambda functions is an incorrect option to assign roles. Option D is incorrect because IAM users are not directly mapped to employees' corporate https://aws.amazon.com/directconnect/
Topics
Community Discussion
No community discussion yet for this question.