Study. uk . com
  1. Home
  2. All questions
  3. Question 23

AWS Certified Solutions Architect study material · question 23 of 500

Which capability lets one AWS managed application pass a signed-in user's identity to another so CloudTrail records the person who acted?

  1. A KMS grant issued to the application
  2. Trusted identity propagation in IAM Identity Center
  3. A permissions boundary on the application role
  4. A service control policy in AWS Organizations
Show the answer

Answer: B. Trusted identity propagation in IAM Identity Center

Trusted identity propagation carries the user's identity between AWS managed applications, so authorization and CloudTrail events reflect the person.

Source: What is IAM Identity Center? (Amazon Web Services) — Trusted identity propagation across applications

Challenge yourself on this topic → Study as cards