AWS · SAP-C03
Identity federation and application access
SAP-C03 · Lesson 11 of 28 · 1:37:27
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAP-C03 exam (AWS Certified Solutions Architect – Professional). In this lesson: workforce federation with IAM Identity Center, SAML, and SCIM, customer identities with Cognito user pools and identity pools, workload identities with EKS Pod Identity and IAM OpenID Connect providers, and hybrid and multi-cloud workloads with IAM Roles Anywhere. Includes three original practice questions.
Preview the topics
- Employees in the external identity provider must reach two hundred AWS accounts with job-based permissions, managed in one place, and leavers must lose access automatically. What should the architect configure?
- The mobile app must upload each customer’s identity documents straight to S3, into that customer’s own prefix, with no AWS keys stored in the app. What should the architect use?
- Batch servers in the data center call S3 with long-term access keys, and the bank already issues X.509 certificates to its servers from its own certificate authority. What should the architect use?