a pharmaceutical company has resources hosted on both their on-premises network and in aws cloud. they want all of their software architects to access resources on both environments using their on-premises credentials, which is stored in active directory. in this scenario, which of the following can be used to fulfill this requirement?