A Large Corporation Is Creating a Multi-Account Strategy and Needs

question 73

Multiple Choice

A large corporation is creating a multi-account strategy and needs to determine how its employees should access the AWS Infrastructure. Which of the following solutions would provide the MOST scalable solution?

• A) Create dedicated IAM users within each AWS account that employees can assume though federation based upon group membership in their existing identity provider.
• B) Use a centralized account with IAM roles that employees can assume through federation with their existing identity provider. Use cross-account roles to allow the federated users to assume their target role in the resource accounts.
• C) Configure the AWS Security Token Service to use Kerberos tokens so that users can use their existing corporate user names and passwords to access AWS resources directly.
• D) Configure the IAM trust policies within each account's role to set up a trust back to the corporation's existing identity provider, allowing users to assume the role based off their SAML token.

---

Definitions:

Substance Use

The consumption of drugs or alcohol, which can range from moderate use to dependency and addiction.

Socratic Questioning

A method of questioning used to stimulate critical thinking, uncover underlying beliefs, and challenge assumptions, based on the teaching style of the ancient Greek philosopher Socrates.

Clarification Questions

Inquiries made to ensure understanding or to obtain more detailed information about a specific topic, statement, or instruction.

Forceful Dialogues

Intense or assertive exchanges of ideas or opinions between individuals or groups, often aimed at resolving conflicts or achieving a particular outcome.