SCS-C03 Question #22: Real Exam Question with Answer & Explanation

Question

A company uses AWS IAM Identity Center to manage access to its AWS accounts. The accounts are in an organization in AWS Organizations. A security engineer needs to set up delegated administration of IAM Identity Center in the organization's management account. Which combination of steps should the security engineer perform in IAM Identity Center before configuring delegated administration? (Select THREE.)

Options

• AGrant least privilege access to the organization's management account.
• BCreate a new IAM Identity Center directory in the organization's management account.
• CSet up a second AWS Region in the organization's management account.
• DCreate permission sets for use only in the organization's management account.
• ECreate IAM users for use only in the organization's management account.
• FCreate user assignments only in the organization's management account.