What option would you implement to successfully launch this application1?

By:
In: SOA-C01
Tagged:
With: 1 Comment
The majority of your Infrastructure is on premises and you have a small footprint on AWS Your company has decided to roll out a new application that is heavily dependent on low latency connectivity to LOAP for authentication Your security policy requires minimal changes to the company’s existing application user management processes.

What option would you implement to successfully launch this application1?

Create a second, independent LOAP server in AWS for your application to use for authentication

Establish a VPN connection so your applications can authenticate against your existing on-premises LDAP servers

Establish a VPN connection between your data center and AWS create a LDAP replica on AWS and configure your application to use the LDAP replica for authentication

Create a second LDAP domain on AWS establish a VPN connection to establish a trust relationship between your new and existing domains and use the new domain for authentication

Explanations:

Creating a second, independent LDAP server in AWS would not align with the policy of minimal changes to user management, and it could introduce synchronization complexities.

Establishing a VPN connection allows the application to authenticate against the existing on-premises LDAP servers, ensuring low latency and minimal changes.

Creating an LDAP replica in AWS may involve complex synchronization tasks and does not necessarily meet the minimal change requirement for user management processes.

Establishing a new LDAP domain and creating trust relationships would introduce unnecessary complexity and changes to the existing user management.

2025-10-08

1 Comment

  1. Michelle
    Author

    As far as I’m aware, the answer is:
    Establish a VPN connection so your applications can authenticate against your existing on-premises LDAP servers

Leave a Reply

Your email address will not be published. Required fields are marked *

one × 1 =