A Company Manages Multiple AWS Accounts and Wants to Provide

question 295

Multiple Choice

A company manages multiple AWS accounts and wants to provide access to AWS from a single management account using an existing on-premises Microsoft Active Directory domain. Which solution will meet these requirements with the LEAST amount of effort?

• A) Create an Active Directory connector using AWS Directory Service. Create IAM users in the target accounts with the appropriate trust policy.
• B) Create an Active Directory connector using AWS Directory Service. Associate the directory with AWS Single Sign-On (AWS SSO). Configure user access to target accounts through AWS SSO.
• C) Create an Amazon Cognito federated identity pool. Associate the pool identity with the on-premises directory. Configure the IAM roles with the appropriate trust policy.
• D) Create an identity provider in AWS IAM associated with the on-premises directory. Create IAM roles in the target accounts with the appropriate trust policy.

---

Definitions:

Reaction Product

The final substances formed upon the completion of a chemical reaction.

Major Product

The main substance produced in a chemical reaction, often present in the largest amount among other products.

Benzoyl Chloride

An organic compound used as an acylating agent in organic synthesis, with the formula C6H5COCl.

Phenyl Propyl Ketone

An organic compound consisting of a ketone functional group bonded to a phenyl group and a propyl group.