Amazon Web Services AWS Certified Associate SOA-C01 Question # 67 Topic 7 Discussion

Create IAM roles in each account to be used by AWS SSO, and associate users with these roles using AWS SSO

Create IAM users in the master account and use AWS SSO to associate the users with the accounts they will access

Create permission sets in AWS SSO and associate the permission sets with Directory Service users or groups

Create service control policies (SCPs) in Organizations and associate the SCPs with Directory Service users or groups