Advance Identity

Question 1

AWS STS (SecurityToken Service)

Answer 1

Enables you to create temporary, limited- privileges credentials to access your AWS
resources

Question 2

Amazon Cognito

Answer 2

• Identity for your Web and Mobile applications users (potentially millions)
• Instead of creating them an IAM user, you create a user in Cognito

Question 3

AWS Managed Microsoft AD

Answer 3

• Create your own AD in AWS, manage users
locally, supports MFA
• Establish “trust” connections with your on- premise AD

Question 4

AD Connector

Answer 4

• Directory Gateway (proxy) to redirect to on- premise AD

* Users are managed on the on-premise AD

Question 5

Simple AD

Answer 5

• AD-compatible managed directory on AWS

* Cannot be joined with on-premise AD

Question 6

AWS Single Sign-On (SSO)

Answer 6

• Centrally manage Single SignOn to access multiple accounts and 3rd-party business applications
• Integrations: SAML, Organizations, Active Directory