Advanced Identity

Question 1

What functionality does the security token service provide?

Answer 1

Allows you to create temporary, limited-privilege credentials to access your AWS resources.

Question 2

What is AWS Cognito?

Answer 2

Identity handling and SSO for web and mobile applications up to millions of users

Question 3

Why use Cognito over IAM?

Answer 3

IAM is meant to be used for people handling the underlying AWS resources or systems in place creating/maintaining the service.
This is different to allowing people to use the service.
E.g. I don’t need to see the provisioning/coding/resources behind Netflix, but I do want to be able to log in and use the service

Question 4

What is AWS Directory Services?

Answer 4

A service that allows you to standardise your login credentials across many different systems seamlessly.
Only works for on-premise systems

Question 5

What does AWS IAM Identity Centre allow you to do? How is it different to AWS Directory Services?

Answer 5

Allows one login for all your AWS accounts and business cloud applications. Can use the built in IAM Identity Centre option or do this using OneLogin, Okta or ActiveDirectory.
Essentially allows SSO in your AWS accounts.
Not for on-premise - that is where directory services would be used.

Question 6

What type of Active Directory is the most expensive but also the most feature rich?

Answer 6

Microsoft Active Directory