Your company has recently extended its datacenter into a VPC on AVVS to add burst computing capacity as
needed Members of your Network Operations Center need to be able to go to the AWS Management Console
and administer Amazon EC2 instances as necessary You don’t want to create new IAM users for each NOC
member and make those users sign in again to the AWS Management Console Which option below will meet
the needs for your NOC members?
A.
Use OAuth 2 0 to retrieve temporary AWS security credentials to enable your NOC members to sign in to
the AVVS Management Console.
B.
Use web Identity Federation to retrieve AWS temporary security credentials to enable your NOC members
to sign in to the AWS Management Console.
C.
Use your on-premises SAML 2.0-compliant identity provider (IDP) to grant the NOC members federated
access to the AWS Management Console via the AWS single sign-on (SSO) endpoint.
D.
Use your on-premises SAML2.0-compliam identity provider (IDP) to retrieve temporary security credentials
to enable NOC members to sign in to the AWS Management Console.
Correct answer is C as seen here:
http://jayendrapatil.com/iam-role-identity-providers-federation/
0
0
C.
Use your on-premises SAML 2.0-compliant identity provider (IDP) to grant the NOC members federated
access to the AWS Management Console via the AWS single sign-on (SSO) endpoint.
0
0
Ans D. in SAML there is no federated access, only temporary credentials are retreived.
0
1
SAML is the standard federated authentication protocol.
0
0
AWS supports identity federation with SAML 2.0 (Security Assertion Markup Language 2.0), an open standard that many identity providers (IdPs) use.
SAML 2.0 based federation feature enables federated single sign-on (SSO), so users can log into the AWS Management Console or call the AWS APIs without having to create an IAM user for everyone in your organization.
By using SAML, the process of configuring federation with AWS can be simplified by using the IdP’s service instead of writing custom identity proxy code.
This is useful in organizations that have integrated their identity systems (such as Windows Active Directory or OpenLDAP) with software that can produce SAML assertions to provide information about user identity and permissions (such as Active Directory Federation Services or Shibboleth)
1
0
D
0
0
C.It is Enterprise Identity Federation.
0
0