You are managing the AWS account of a big organization. The organization has more than 1000+ employees and they want to provide access to the various services to most of the employees. Which of the below mentioned options is the best possible solution in this case?

Answer options:

A.The user should create a separate IAM user for each employee and provide access to them as per the policy
B.The user should create an IAM role and attach STS with the role. The user should attach that role to the EC2instance and setup AWS authentication on that server
C.The user should create IAM groups as per the organization’s departments and add each user to the groupfor better access control
D.Attach IAM roles with the organization’s authentication service to authorize each user for various AWS services

Answer – D
The best practise for IAM is to create roles which has specific access to an AWS service and then give the user permission to the AWS service via the role.
For the best practises on IAM policies, please visit the link:
http://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html