Which solution should be used to satisfy these requirements?

By:
In: SOA-C01
Tagged:
With: 1 Comment
Each SysOps Administrator at a company has a unique IAM user account.Each user is a member of the SysOps IAM group that has an IAM policy applied.A recent change to the IT security policy states that employees must now use their on-premises Active Directory user accounts to access the AWS ManagementConsole.

Which solution should be used to satisfy these requirements?

Configure the on-premises Active Directory to use AWS Direct Connect.

Enable an Active Directory federation in an Amazon Route 53 private zone.

Implement a VPN tunnel and configure an Active Directory connector.

Implement multi-factor authentication for IAM and Active Directory.

Explanations:

AWS Direct Connect is used for establishing a dedicated network connection between on-premises networks and AWS. It does not provide integration for Active Directory authentication.

Amazon Route 53 is used for DNS management. It does not support Active Directory federation for authentication purposes, so it cannot be used to meet this requirement.

Implementing a VPN tunnel and configuring an Active Directory connector (such as AWS Directory Service) allows users to authenticate using on-premises Active Directory credentials.

Multi-factor authentication (MFA) improves security but does not directly address the requirement for using on-premises Active Directory credentials for AWS access.

2025-10-09

1 Comment

  1. Sean
    Author

    I have a feeling that the answer is:
    Implement a VPN tunnel and configure an Active Directory connector.

Leave a Reply

Your email address will not be published. Required fields are marked *

nine − seven =