A company is preparing to give AWS Management Console access to developers Company
policy mandates identity federation and role-based access control. Roles are currently
assigned using groups in the corporate Active Directory. What combination of the following
will give developers access to the AWS console? (Select 2) Choose 2 answers

A.
AWS Directory Service AD Connector

B.
AWS Directory Service Simple AD

C.
AWS Identity and Access Management groups

D.
AWS identity and Access Management roles

E.
AWS identity and Access Management users

Explanation:
http://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html