Which of the following AWS services allows you to create and manage federated identities, enabling Single Sign-On (SSO) across multiple AWS accounts and external identity providers?