AWS IAM Identity Center (formerly SSO)

Single sign-on for all AWS accounts in your organization, business apps (Salesforce, Microsoft 365), and SAML 2.0-enabled apps. Identity providers can be the built-in store, Active Directory, Okta, etc. Uses Permission Sets to assign access.

References

IAM Identity Center (User Guide)

Multi-Account Strategy Next: AWS Directory Services

Quiz

A few quick questions based on this unit. Mark it complete when you are done.

Completed

Question 1 / 2

What is Single sign?

on for all AWS accounts in your organization, business apps (Salesforce, Microsoft 365), and SAML 2.0-enabled apps. Identity providers can be the built-in store, Active Directory, Okta, etc. Uses Permission Sets to assigcapture IP traffic info for VPCs, subnets, or ENIs. Send to S3, CloudWatch Logs, or Kinesis Data Firehose. Key fields: srcaddr, dstaddr, srcport, dstport, action (ACCEPT/REJECT). Use Athena or CloudWatch Logs Insights toEC2 in public subnet used to SSH into private instances.AD-compatible managed directory, can't join to on-premises AD.