A Large Corporation Is Creating a Multi-Account Strategy and Needs

question 73

Multiple Choice

A large corporation is creating a multi-account strategy and needs to determine how its employees should access the AWS Infrastructure. Which of the following solutions would provide the MOST scalable solution?

• A) Create dedicated IAM users within each AWS account that employees can assume though federation based upon group membership in their existing identity provider.
• B) Use a centralized account with IAM roles that employees can assume through federation with their existing identity provider. Use cross-account roles to allow the federated users to assume their target role in the resource accounts.
• C) Configure the AWS Security Token Service to use Kerberos tokens so that users can use their existing corporate user names and passwords to access AWS resources directly.
• D) Configure the IAM trust policies within each account's role to set up a trust back to the corporation's existing identity provider, allowing users to assume the role based off their SAML token.

---

Definitions:

Compound Annual Growth Rate

The mean annual growth rate of an investment over a specified time period longer than one year, expressing the compound growth of an investment.

Relative Market Share

A metric that compares a company’s market share to that of its largest competitor, indicating its competitive position in the market.

BCG Business Portfolio

A strategic planning tool that categorizes a company's products or services into four quadrants (Stars, Cash Cows, Question Marks, Dogs) based on market growth and market share.

SBU

Strategic Business Unit; a subunit within a larger organization that operates with its own mission, objectives, and market focus, separate from other business units.