Ultimate access to all questions.
A company is using an on-premises Active Directory service for user authentication.The company wants to use the same authentication service to sign in to the company's AWS accounts, which are using AWS Organizations. AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company's AWS accounts. The company's security policy requires conditional access to the accounts based on user groups and roles.User identities must be managed in a single location. Which solution will meet these requirements?