As an AWS Solutions Architect, you need to configure an identity service in AWS based on SAML. Since you already have a SAML identity provider outside of AWS, you plan to use the same IdP to manage user identities. To create the SAML identity provider in IAM, the below steps may be required.

Answer options:

A.4 -> 1 -> 5 -> 2
B.3 -> 1 -> 4 -> 2
C.1 -> 4 -> 3 -> 5
D.3 -> 4 -> 1 -> 5
 

Correct Answer – D
Please check https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml.html on how to create IAM SAML identity providers.
Option A is incorrect: Because assume-role-with-web-identity is not used for SAML identity provider. Step 2 should not be included.
Option B is incorrect: Same reason as
Option A.Option C is incorrect: Before creating the identity provider, you need to get the metadata document from IdP:
Option D is CORRECT: After creating the identity provider in step 4, you need to configure the IdP side as steps 1 and 5 which add relying party trust between the IdP and AWS.