A regional transit authority wants one login portal so staff across subsidiaries can reach multiple AWS accounts with workforce single sign-on. Which service should the architect designate as the central workforce SSO hub?
Select an answer to reveal the explanation.
Short Explanation
Think of one city hall badge that opens every department door instead of a key ring per building. IAM Identity Center is that badge for AWS—workforce SSO into many accounts from one portal. Per-account IAM users, root logins, or keys in a bucket are the messy key rings you are trying to retire.
Full Explanation
AWS IAM Identity Center (formerly AWS SSO) provides a central place to create or connect workforce identities and assign permission sets across accounts in an organization. That pattern matches a multi-subsidiary transit authority that needs one login experience rather than duplicated IAM users. Root-user sign-in is reserved for break-glass tasks, and embedding long-lived access keys in public storage violates least privilege and secret hygiene. The architect therefore selects Identity Center as the workforce SSO hub for secure multi-account access.