A Large Company Has Hundreds of AWS Accounts

question 131

Multiple Choice

A large company has hundreds of AWS accounts. The company needs to provide its employees with access to these accounts. The solution must maximize scalability and operational efficiency. Which solution meets these requirements?

• A) With each AWS account, create dedicated IAM users that employees can assume through federation based upon group membership in their existing identity provider.
• B) Use a centralized account with IAM roles that employees can assume through federation with their existing identity provider. Create a custom authorizer by using AWS SDK to give federated users the ability to assume their target role in the resource accounts.
• C) Implement AWS Control Tower for multi-account management by integrating AWS Single Sign-On with the company's existing identity provider. Create IAM roles for the identity provider to assume.
• D) Configure the IAM trust policies within each account's role to set up a trust back to the company's existing identity provider. Allow users to assume the role based on their SAML token.

---

Definitions:

Amnion

A membranous sac that surrounds and protects an embryo or fetus in the amniotic cavity of vertebrates.

Yolk Sac

An extra-embryonic membrane in many vertebrates that provides food for the embryo via absorbed nutrients.

Gas Exchange

The biological process through which organisms exchange oxygen and carbon dioxide with their environment, typically occurring in the lungs or gills.

Fetus

A developing mammal or human from the end of the embryonic stage, recognizably human in form, until birth.