AWS Certified Cloud Practitioner CLF-C02Demo

By Amazon · Question Mode

QuestionQ673

Content Domain 3: Cloud Technology and Services

A company uses a third-party identity provider (IdP). The company wants to provide its employees with access to AWS accounts and services without requiring another set of login credentials.

Which AWS service will meet this requirement?

  • A AWS Directory Service
  • B Amazon Cognito
  • C AWS IAM Identity Center
  • D AWS Resource Access Manager (AWS RAM)
Explanation

AWS IAM Identity Center (formerly AWS SSO) enables employees to access AWS accounts using an existing third-party identity provider via federation protocols like OIDC and SAML 2.0, eliminating the need for separate AWS credentials. This centralized identity management service is purpose-built for workforce identity federation, unlike Amazon Cognito which is primarily for application-level user authentication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!