You are working as an AWS Architect for an enterprise customer. Users access Amazon S3 buckets to save all project-related documents and use business applications like Office 365 for daily work activities. These applications need to be accessible from any device for a limited number of hours in the day.
They are using AWS SSO to manage and control access to AWS resources centrally. Users are complaining that they are getting logout from the console & need to re-login after each hour. You need to ensure that the User session is optimum based on completing the activity. Which of the following can be set to meet this requirement?

Answer options:

A.Create a custom Permission Set with session duration as 24 hours.
B.Use an existing Job Function policy to set session duration as 24 hours.
C.Create a custom Permission Set with session duration as 6 hours.
D.Use an existing Job Function policy to set session duration as 6 hours.

Correct Answer –C
Permission sets can control the time duration for user login to the AWS Console by setting session duration. The Default Session duration is 1 hour, while the maximum can be set to 12 hours. Post this session duration. The user is automatically logout.
AWS Single Sign-On (SSO) enables you to customize the session duration to AWS accounts ranging from 1 hour up to 12 hours. You can configure session duration for each permission set so that you can optimize how long your users can access the AWS Management Console and AWS CLI for your AWS accounts. For example, when your users need to run long-running operations, you can increase the session duration to complete the operation using a single session.
Option A is incorrect as the maximum Session duration that can be set is 12 hours.
Option B is incorrect. This will use predefined AWS managed policies since the requirement is for a customized permission policy for session duration. Also, the maximum Session duration that can be set is 12 hours.
Option D is incorrect. This will use predefined AWS managed policies since the requirement is for a customized permission policy for session duration.
For more information on Permission Set properties in AWS SSO, refer to the following URLs-
https://aws.amazon.com/about-aws/whats-new/2018/10/aws-single-sign-on-now-enables-you-to-optimize-how-long-you-can-access-aws-accounts/
https://docs.aws.amazon.com/singlesignon/latest/userguide/howtosessionduration.html