Your fortune 500 company has under taken a TCO analysis evaluating the use of Amazon S3
versus acquiring more hardware. The outcome was that all employees would be granted access
to use Amazon S3 for storage of their personal documents.
Which of the following will you need to consider so you can set up a solution that incorporates
single sign-on from your corporate AD or LDAP directory and restricts access for each user to a
designated user folder in a bucket? Choose 3 answers

A.
Using AWS Security Token Service to generate temporary tokens.

B.
Setting up a matching IAM user for every user in your corporate directory that needs access to a
folder in the bucket.

C.
Tagging each folder in the bucket.

D.
Configuring an IAM role.

E.
Setting up a federation proxy or identity provider.