Sec. 19: Advanced Identity

A company would like to use their on-premises Microsoft Active Directory to connect to its AWS resources. Which service can it use?

• Directory Services

• Single Sign-On

• Direct Connect

• Cognito

Answer explanation

AWS Directory Service makes it easy for you to setup and run directories in the AWS cloud, or connect your AWS resources with an existing on-premises Microsoft Active Directory.

Which of the following services can help you manage multiple AWS accounts?

IAM

• Directory Services

• Organizations

• Single Sign-On

Answer explanation

Organizations helps you to centrally manage billing; control access, compliance, and security; and share resources across your AWS accounts.

You should use IAM Roles if you want to create temporary, limited-privilege credentials for your AWS resources.

• True

• False

Answer explanation

IAM Roles are sets of permissions making AWS service requests, which will be used by AWS services, but they do not provide temporary security credentials.. AWS Security Token Service (AWS STS) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users that you authenticate (federated users).

A company just created a new mobile application and wants to add a simple and secure user sign-up, sign-in, and access control. Which AWS service can it use?

• IAM

• Cognito

• Directory Services

• Single Sign-On

Answer explanation

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.

A company would like to centrally manage access to multiple AWS accounts and business applications. Which service can it use?

• Organizations

• Cognito

• Directory Service

• Single Sign-On

Answer explanation

AWS SSO is an AWS service that enables you to makes it easy to centrally manage access to multiple AWS accounts and business applications and provide users with single sign-on access to all their assigned accounts and applications from one place.