Amazon Exam BDS-C00 Topic 6 Question 80 Discussion

Actual exam question for Amazon's BDS-C00 exam

Question #: 80
Topic #: 6

A company is preparing to give AWS Management Console access to developers. Company policy mandates identity federation and role based access control. Roles are currently assigned using groups in the corporate Active Directory. What combination of the following will give developers access to the AWS console? Choose 2 answers

AAWS Directory Service AD connector

BAWS Directory Service Simple AD

CAWS identity and Access Management groups

DAWS identity and Access Management roles

EAWS identity and Access Management users

Show Suggested Answer

Suggested Answer: A

by Freeman at Oct 05, 2023, 12:29 AM

Limited Time Offer

25%

Off

Get Premium BDS-C00 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Keneth

2 months ago

I bet the exam writers are chuckling to themselves, thinking 'Let's see if they can resist the temptation of those individual IAM users!'

upvoted 0 times

Hector

23 days ago

C) AWS identity and Access Management groups

upvoted 0 times

...

Peggy

1 months ago

A) AWS Directory Service AD connector

upvoted 0 times

...

Carey

2 months ago

Hah, imagine if we tried to just add the developers as individual IAM users. That would be a nightmare to manage! Good thing we've got the group and role-based approach.

upvoted 0 times

...

Roy

2 months ago

Wait, do we need to create a whole new directory service with Simple AD? I thought the AD Connector would do the trick. Oh well, better to have options, I guess.

upvoted 0 times

Corrie

1 months ago

C) AWS identity and Access Management groups

upvoted 0 times

...

Elliott

2 months ago

A) AWS Directory Service AD connector

upvoted 0 times

...

Gladys

2 months ago

Yeah, the AD groups are the key here. We'll use the AWS Directory Service AD Connector to link our on-prem AD to AWS, and then assign the IAM roles based on those AD groups. Seems straightforward enough.

upvoted 0 times

...

Willow

2 months ago

Hmm, looks like I need to use both AWS IAM roles and AD groups to give the developers the access they need. The AD groups will map to the IAM roles, right?

upvoted 0 times

Thea

1 months ago

It's a secure and efficient way to give developers access to the AWS Management Console.

upvoted 0 times

...

Belen

1 months ago

Exactly, that way we can manage access control based on the roles assigned to the AD groups.

upvoted 0 times

...

Hermila

1 months ago

So, we will use AWS IAM roles to define the permissions and AD groups to assign users to those roles.

upvoted 0 times

...

Malcom

1 months ago

Yes, you are correct. Using AWS IAM roles and AD groups is the way to go.

upvoted 0 times

...

Myong

2 months ago

I'm not sure about this. Can someone explain why we need both IAM groups and roles for developers to access the AWS console?

upvoted 0 times

...

Jackie

2 months ago

I agree with Timmy. Using IAM groups and roles will allow developers to access the AWS console based on their permissions.

upvoted 0 times

...

Timmy

2 months ago

I think the correct answers are C) AWS identity and Access Management groups and D) AWS identity and Access Management roles.

upvoted 0 times

...