AWS · SAA-C03
Multi-account access and federation
SAA-C03 · Lesson 2 of 23 · 10:30
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAA-C03 exam (AWS Certified Solutions Architect – Associate). In this lesson: AWS Organizations and service control policies, AWS Control Tower and its preventive, detective, and proactive controls, roles and AWS STS temporary credentials, cross-account access, and federation with IAM Identity Center and a corporate directory. Includes three original practice questions.
Preview the topics
- No one in the development accounts may ever launch resources outside two approved Regions, not even an administrator of those accounts. What should the architect use?
- An application in the operations account must read a DynamoDB table in the production account. What is the recommended way to give it access?
- Five thousand employees are in an on-premises Active Directory, and must sign in to forty AWS accounts with their existing credentials. What should the architect choose?