AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 179

Question

An organization with a large IT department has decided to migrate to AWS. With different job functions in the IT department, it is not desirable to give all users access to all AWS resources. Currently the organization handles access via LDAP group membership. What is the BEST method to allow access using current LDAP credentials?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Federate the LDAP directory with IAM using SAML. Create different IAM roles to correspond to different LDAP groups to limit permissions. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 179