A city directory already runs Active Directory on-premises and wants employees to use existing identities for the AWS Management Console. What should the architect recommend?
Select an answer to reveal the explanation.
Short Explanation
Nobody wants a second password sticky-note for every city worker. Federate Active Directory (or similar) into IAM roles or Identity Center so the same corporate login opens the AWS Console. Duplicating IAM users for the whole workforce is the path to sprawl.
Full Explanation
Workforce access should federate existing directory identities to AWS using SAML/OIDC with IAM roles or AWS IAM Identity Center, rather than creating and maintaining a parallel IAM user for every employee. Shared IAM users and long-lived keys as the primary human access path weaken accountability and least privilege. Federation keeps identity lifecycle with the corporate directory.