An enterprise is using federated Security Assertion Markup Language (SAML) to access the AWS Management Console. How should the SAML assertion mapping be configured?
A.
Map the group attribute to an AWS group. The AWS group is assigned IAM policies that govern access to AWS resources.
B.
Map the policy attribute to IAM policies the federated user is assigned to. These policies govern access to AWS resources.
C.
Map the role attribute to an AWS role. The AWS role is assigned IAM policies that govern access to AWS resources.
D.
Map the user attribute to an AWS user. The AWS user is assigned specific IAM policies that govern access to AWS resources.
C. Map the role attribute to an AWS role. The AWS role is assigned IAM policies that govern access to AWS resources.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_saml.html
By mapping the role attribute from the SAML assertion to an AWS role, you can assign specific IAM policies to that role, which in turn determine the permissions and access rights the federated user has in the AWS environment.
An IAM SAML 2.0 identity provider is an entity in IAM that describes an external identity provider (IdP) service that supports the SAML 2.0 (Security Assertion Markup Language 2.0) standard. You use an IAM identity provider when you want to establish trust between a SAML-compatible IdP such as Shibboleth or Active Directory Federation Services and AWS, so that users in your organization can access AWS resources. IAM SAML identity providers are used as principals in an IAM trust policy.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
nicat
Highly Voted 2 years, 9 months agoalbert_kuo
Most Recent 11 months, 3 weeks agoRicardoD
2 years, 8 months agoabhishek_m_86
2 years, 8 months agojackdryan
2 years, 8 months agoMFDOOM
2 years, 9 months agowaterzhong
2 years, 9 months agowaterzhong
2 years, 9 months agoAWS_Noob
2 years, 9 months agogofavad926
2 years, 9 months ago