A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications.
Which AWS service will meet these requirements?
A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications.
Which AWS service will meet these requirements?
AWS IAM Identity Center (AWS Single Sign-On) enables companies to centrally manage workforce users and their access across all AWS accounts and applications. It simplifies the management of access by providing a single sign-on access portal and the ability to enforce multi-factor authentication, offering a streamlined solution that ensures consistent security practices across the organization's AWS environment.
I believe it's correct because "The AWS access portal provides IAM Identity Center users with single sign-on access to all their assigned AWS accounts and applications through a web portal." So it's centrally managed. And: ". Use IAM Identity Center with your existing identity source or create a new directory, and manage workforce access to part or all of your AWS environment."
D. AWS IAM Identity Center (AWS Single Sign-On) AWS IAM Identity Center, also known as AWS Single Sign-On (SSO), is a service that simplifies the management of access to AWS accounts and business applications by providing centralized identity and access management. With AWS SSO, companies can create and manage workforce users, control their access to AWS accounts and applications using single sign-on, and enforce multi-factor authentication for enhanced security. This service helps streamline access management and ensures consistent security practices across the organization's AWS environment.
Per Copilot: The AWS service that will meet these requirements is Amazon Cognito. It provides a comprehensive solution for managing sign-in security, user authentication, and access control across multiple AWS accounts and applications.
Can someone please check if B is actually the right answer?
I think it's D, as Cognito is more for third-part applications like credentials for facebook, etc.
Cognito = User authentication for Apps IAM Identity Center = Centralized access management for AWS and Apps The answer is D) AWS IAM Identity Center
would someone help with 392? much appreciation.