AWS Identity Federation

AWS Identity Federation是使用外部授权源来允许访问AWS Console和AWS Resources的概念。Identity Federation具有多个级别，可使用现有目录或SAML来确保对用户进行授权和认证以访问AWS。

Video: .MP4, AVC, 1920×1080, 30 fps | Audio: English, AAC, 44.1 KHz, 2 Ch | Duration: 41m | 604 MB
Instructor: Tom Lynch

Course Description:

AWS Identity Federation is the concept of using external authorization sources to permit access to AWS Console and AWS Resources. Identity Federation comes is multiple levels that enables the use of existing directories or SAML to ensure users are accredited and authenticated to access AWS.

Intended audience:

AWS Administrators
Security Engineers
Security Architects

Learning Objectives:

Understand what is Identity Federation as it relates to AWS Console Access.
Demonstrate ability to setup and use Cross Account Roles
Demonstrate the ability to use Simple AD for IAM authorization with Cross Account Roles
Understand the concepts of SAML Determine how SAML could be used for AWS Console Authorization

What You’ll Learn:

Course Intro: What to expect from this course
What is Identity Federation?: This lesson defines the purpose and uses for Identity Federation.
Types of Identity Federation: In this lesson we’ll discuss the different ways it is used within AWS.
Identity Federation Demos: In this lesson we’ll walk through how to setup both Cross Account Roles using IAM User ids and using Simple AD for Authentication with Cross Account Roles.
Course Conclusion: A wrap-up and review of the course.