City employees already authenticate to on-premises Active Directory. Leadership wants them to access AWS without creating a unique long-term IAM password for every person. Which approach matches that goal?
Select an answer to reveal the explanation.
Short Explanation
Federation is the bridge between the city's existing login system and AWS — people keep using Active Directory, and AWS trusts that identity instead of minting thousands of separate IAM passwords. One corporate login story, temporary AWS access on the other side.
Full Explanation
Federated identity allows users authenticated by an external identity provider (such as corporate Active Directory/IdP) to obtain AWS access without maintaining individual long-term IAM user passwords for each person. Temporary credentials are typically issued after successful federation. This scales workforce access and reduces credential sprawl compared with per-person IAM users alone.