A Large Company Has Hundreds of AWS Accounts

question 131

Multiple Choice

A large company has hundreds of AWS accounts. The company needs to provide its employees with access to these accounts. The solution must maximize scalability and operational efficiency. Which solution meets these requirements?

• A) With each AWS account, create dedicated IAM users that employees can assume through federation based upon group membership in their existing identity provider.
• B) Use a centralized account with IAM roles that employees can assume through federation with their existing identity provider. Create a custom authorizer by using AWS SDK to give federated users the ability to assume their target role in the resource accounts.
• C) Implement AWS Control Tower for multi-account management by integrating AWS Single Sign-On with the company's existing identity provider. Create IAM roles for the identity provider to assume.
• D) Configure the IAM trust policies within each account's role to set up a trust back to the company's existing identity provider. Allow users to assume the role based on their SAML token.

---

Definitions:

Team Problems

Issues and challenges that arise within a team setting, often requiring collaborative efforts for resolution.

Team Leadership

The practice of leading a team effectively by motivating members, coordinating efforts, and ensuring the team works towards common objectives.

Monitoring Function

The process of continuously observing and evaluating performance or progress to ensure goals are being met and to identify any need for corrective action.

Fast-Paced Environment

characterizes situations or workplaces where decisions need to be made quickly, and actions are executed rapidly to adapt to changing circumstances.