Which of the below mentioned options is the best possible solution in this case?

You are managing the AWS account of a big organization. The organization has more than 1000+ employees and they want to provide access to the various services to most of the employees.

Which of the below mentioned options is the best possible solution in this case?
A . The user should create a separate IAM user for each employee and provide access to them as per the policy
B . The user should create an IAM role and attach STS with the role. The user should attach that role to the EC2 instance and setup AWS authentication on that server
C . The user should create IAM groups as per the organization’s departments and add each user to the group for better access control
D . Attach an IAM role with the organization’s authentication service to authorize each user for various AWS services

View Answer

Answer: D