Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam SCS-C02 All Questions
Exam SCS-C02 All Questions

View all questions & answers for the SCS-C02 exam

Amazon Web Services AWS Certified Specialty SCS-C02 Question # 125 Topic 13 Discussion

SCS-C02 Exam Topic 13 Question 125 Discussion:
Question #: 125
Topic #: 13

A security engineer is implementing authentication for a multi-account environment by using federated access with SAML 2.0. The security engineer has configured AWS IAM Identity Center as an identity provider (IdP). The security engineer also has created IAM roles to grant access to the AWS accounts.

A federated user reports an authentication failure when the user attempts to authenticate with the new system.

What should the security engineer do to troubleshoot this issue in the MOST operationally efficient way?


A.

Review the SAML IdP logs to identify errors. Check AWS CloudTrail to verify the API calls that the user made.


B.

Review the SAML IdP logs to identify errors. Use the IAM policy simulator to validate access to the IAM roles.


C.

Use IAM access advisor to review recent service access. Use the IAM policy simulator to validate access to the IAM roles.


D.

Recreate the SAML IdP in a separate account to confirm the behavior that the user is experiencing.


Get Premium SCS-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.