A company uses AWS Organizations to host several applications across multiple AWS accounts. Several teams are responsible for building and maintaining the infrastructure of the applications across the AWS accounts. A SysOps administrator must implement a solution to ensure that user accounts and permissions are centrally managed. The solution must be integrated with the company's existing on-premises Active Directory environment. The SysOps administrator already has enabled AWS IAM Identity Center (AWS Single Sign-On) and has set up an AWS Direct Connect connection. What is the MOST operationally efficient solution that meets these requirements?

Question

Accepted Answer

D. Use the built-in SSO directory as the identity source for IAM Identity Center. Copy the users and

Answer

A. Create a Simple AD domain, and establish a forest trust relationship with the on-premises Active

Answer

B. Create an Active Directory domain controller on an Amazon EC2 instance that is joined to the on-

Answer

C. Create an AD Connector that is associated with the on-premises Active Directory domain. Set the

A company uses AWS Organizations to host several applications across multiple AWS accounts. Several teams are responsible for building and maintaining the infrastructure of the applications across the

Question

Options

How the community answered

Explanation

Topics

Community Discussion