CloudGuild · Blog · Cheat sheets · Lessons · Certifications
AWS Certified Solutions Architect - Associate Exam Question Walkthrough
Understand how to answer a key AWS SAA-C03 exam question about user access management.
Candidates often trip over questions about user access management. The distinction between different AWS services is critical. Knowing which service fits the scenario can make or break your exam.
The question
A company needs to ensure that their AWS resources are protected against unauthorized access while allowing users to securely access their resources from different locations. What is the most suitable AWS service to implement for managing this requirement?
- A. AWS Secrets Manager
- B. AWS Single Sign-On
- C. Amazon GuardDuty
- D. AWS Shield
Think before you scroll
Evaluate each option based on its primary function. The focus here is on securely managing user access to resources from various locations. Analyze how each service aligns with this need.
The answer
The correct option is B. AWS Single Sign-On. This service enables centralized management of user access to AWS resources, providing secure access from multiple locations while protecting against unauthorized access.
Why the other options lose
- A. AWS Secrets Manager: This service is designed to manage and store secrets, such as API keys and passwords. It does not provide user access management, which is the core requirement of the question.
- C. Amazon GuardDuty: GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior. While it enhances security, it does not manage user access directly.
- D. AWS Shield: This service protects applications from Distributed Denial of Service (DDoS) attacks. It focuses on protecting resources from external threats rather than managing user access.
The concept behind it
The principle here is understanding the specific roles of AWS services. Each service has a unique purpose. AWS Single Sign-On is about user identity and access management, which is essential for controlling who can access resources and from where.
Exam trap to remember
Remember: user access management is about identity, not just security measures. Prioritize services like AWS Single Sign-On when the question centers on managing user access.