Which AWS service gives a company one central place to connect its workforce identities and grant employees access to multiple AWS accounts and business applications?
Show answer and explanation
Answer: A
IAM Identity Center (the core of AWS SSO) is designed for the workforce: you connect your existing identity directory once and assign users or groups fine-grained access across the AWS Organizations estate and supported applications. One sign-in journey, centrally governed.
The distractors serve entirely different audiences and jobs — customer-facing sign-ins, TLS certificates, and threat detection.
Why the other options are wrong
- B. Cognito user pools authenticate your application's end customers, not employees needing cross-account access.
- C. Certificate Manager issues and renews TLS certificates; identity management is not part of it.
- D. GuardDuty analyzes logs to detect threats and never handles authentication or access assignment.