A Company Manages Multiple AWS Accounts and Wants to Provide

Multiple Choice

A company manages multiple AWS accounts and wants to provide access to AWS from a single management account using an existing on-premises Microsoft Active Directory domain. Which solution will meet these requirements with the LEAST amount of effort?

A) Create an Active Directory connector using AWS Directory Service. Create IAM users in the target accounts with the appropriate trust policy.
B) Create an Active Directory connector using AWS Directory Service. Associate the directory with AWS Single Sign-On (AWS SSO) . Configure user access to target accounts through AWS SSO.
C) Create an Amazon Cognito federated identity pool. Associate the pool identity with the on-premises directory. Configure the IAM roles with the appropriate trust policy.
D) Create an identity provider in AWS IAM associated with the on-premises directory. Create IAM roles in the target accounts with the appropriate trust policy.