Practice · GIAC Cloud Security Architecture and Design

~/giac-gcad · giac-gcad_d1_29207b201ccb ▊

← GIAC Cloud Security Architecture and Design · practice sheet

giac-gcad_d1_29207b201ccb domain/d1 · medium single

A security architect needs to allow a batch processing workload running on-premises to authenticate to AWS machine identities without embedding long-lived AWS access keys. Which approach aligns with the cross-cloud authentication patterns taught for authenticating workloads to cloud machine identities?

A Provision the workload as a customer identity in AWS Cognito user pools
B Use certificates with AWS IAM Roles Anywhere to authenticate the workload to a cloud machine identity
C Assign the on-premises server an Azure managed identity federated through Entra External ID
D Create a conditional access policy in Entra ID that grants the server a bearer token

Unlock this exam to join the per-question discussion and vote on questions.

next question →