A multinational company operates in multiple AWS Regions.

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Aug 16, 2026
Questions: 954

Amazon Web Services SAA-C03 Question Answer

A multinational company operates in multiple AWS Regions. The company must ensure that its developers and administrators have secure, role-based access to AWS resources.

The roles must be specific to each user ' s geographic location and job responsibilities.

The company wants to implement a solution to ensure that each team can access only resources within the team ' s Region. The company wants to use its existing directory service to manage user access. The existing directory service organizes users into roles based on location. The system must be capable of integrating seamlessly with multi-factor authentication (MFA).

Which solution will meet these requirements?

Use AWS Security Token Service (AWS STS) to generate temporary access tokens. Integrate STS with the directory service. Assign Region-specific roles.

Configure AWS IAM Identity Center with federated access. Integrate IAM Identity Center with the directory service to set up Region-specific IAM roles.

Create IAM managed policies that restrict access by location. Apply policies based on group membership in the directory.

Use custom Lambda functions to dynamically assign IAM policies based on login location and job function.