Amazon
SOA-C02 · Question #203
An organization with a large IT department has decided to migrate to AWS. With different job functions in the IT department, it is not desirable to give all users access to all AWS resources…
The correct answer is D. Federate the LDAP directory with IAM using SAML. Create different IAM roles to correspond to. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-
Submitted by miguelv· Mar 30, 2026Security and Compliance
Question
An organization with a large IT department has decided to migrate to AWS. With different job functions in the IT department, it is not desirable to give all users access to all AWS resources. Currently the organization handles access via LDAP group membership. What is the BEST method to allow access using current LDAP credentials?
Options
- ACreate an AWS Directory Service Simple AD. Replicate the on-premises LDAP directory to
- BCreate a Lambda function to read LDAP groups and automate the creation of IAM users.
- CUse AWS CloudFormation to create IAM roles. Deploy Direct Connect to allow access to the
- DFederate the LDAP directory with IAM using SAML. Create different IAM roles to correspond to
How the community answered
(36 responses)- A3% (1)
- B17% (6)
- C8% (3)
- D72% (26)
Explanation
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-
Topics
#LDAP federation#SAML#IAM roles#identity federation
Community Discussion
No community discussion yet for this question.