SCS-C03 Question #36: Real Exam Question with Answer & Explanation

Question

A company uses an organization in AWS Organizations to manage multiple AWS accounts. The company wants to centrally give users the ability to access Amazon Q Developer. Which solution will meet this requirement?

Options

• AEnable AWS IAM Identity Center and set up Amazon Q Developer as an AWS managed
• BEnable Amazon Cognito and create a new identity pool for Amazon Q Developer.
• CEnable Amazon Cognito and set up Amazon Q Developer as an AWS managed application.
• DEnable AWS IAM Identity Center and create a new identity pool for Amazon Q Developer.

Explanation

AWS IAM Identity Center is the recommended service for centrally managing workforce access across multiple AWS accounts within an organization. According to AWS Certified Security - Specialty documentation, Amazon Q Developer integrates natively with IAM Identity Center as an AWS managed application. By enabling IAM Identity Center and assigning Amazon Q Developer to users or groups, the company can centrally control access using permission sets and organizational boundaries. This approach provides centralized authentication, authorization, and auditing with minimal overhead. Amazon Cognito is intended for customer and application user authentication, not workforce access to AWS services. Identity pools are not applicable to IAM Identity Center integrations. AWS best practices clearly recommend IAM Identity Center for workforce access to AWS- managed applications.

No community discussion yet for this question.