A company wants to control access to its AWS resources by using identities and groups that are defined in its existing Microsoft Active Directory. What must the company create in its AWS account to map permissions for AWS services to Active Directory user attributes?

Question

Quizplus · Accepted Answer

AWS IAM roles can be used to map permissions for AWS services to Active Directory user attributes by establishing trust relationships and using SAML-based federation.

A Company Wants to Control Access to Its AWS Resources