A. Create subaccounts and cross-account roles for each of the applications. Create users. Assign cross-account roles to the users. Provide users with their initial credentials. B Configure AWS Single Sign-On. Create users. Assign the users the permission sets for the application accounts that they need to access. Provide users with their initial credentials.
B. Use AWS Systems Manager Session Manager to obtain shell access to the EC2 instances.
C. Create an organization in AWS Organizations with all features enabled to manage the accounts. Create subaccounts to host each of the applications.
D. Create an AWS Lambda function to rotate user access keys every 30 days.
E. Create an AWS Lambda function to rotate SSH keys for the EC2 instances every 30 days.