Advanced identity

Question 1

What is AWS STS (Security Token Service)

Answer 1

Enables you to create temp, limited privelges credentials to access your AWS resources
Short-term crednetials: you configure expiration period

Question 2

What are use cases for STS (Security Token Service)

Answer 2

identity federation - manage user identities in external systems
IAM Roles for cross/same account access
IAM Roles for Amazon EC2: provide temporary credentials for EC2 instance to access AWS resources

Question 3

What is AWS Cognito

Answer 3

Identify for your Web and Mobile apps users

Instead of creating them an IAM user, you create a user in Cognito

Question 4

What is AWS Managed Microsoft AD

Answer 4

Create your own AD in AWS, manage users locally supports MFA
Establish trust connections with your on-premise AD

Question 5

What is AD Connector

Answer 5

Directory Gateway (proxy) to redirect to on-premise AD 
Users are managed on the on-premise AD

Question 6

What is Simple AD

Answer 6

AD-compatible managed directory on AWS

Cannot be joined with on-premise AD

Question 7

What is AWS Single Sign-On (SSO)

Answer 7

Centrally manage Single Sign-On to access multiple accounts and 3rd-party business applications
Supports SAML 2.0 markup
Integration with on-premise Active Directory

Question 8

What is STS (Security Token Service

Answer 8

Temporary, limited-privileges credentials to access AWS resources