Amazon Exam DVA-C02 Topic 7 Question 25 Discussion

Actual exam question for Amazon's DVA-C02 exam

Question #: 25
Topic #: 7

A developer must use multi-factor authentication (MFA) to access data in an Amazon S3 bucket that is in another AWS account. Which AWS Security Token Service (AWS STS) API operation should the developer use with the MFA information to meet this requirement?

AAssumeRoleWithWebidentity

BGetFederationToken

CAssumeRoleWithSAML

DAssumeRole

Show Suggested Answer

Suggested Answer: D

AWS STS AssumeRole:The central operation for assuming temporary security credentials, commonly used for cross-account access.

MFA Integration:TheAssumeRolecall can include MFA information to enforce multi-factor authentication.

Credentials for S3 Access:The returned temporary credentials would provide the necessary permissions to access the S3 bucket in the other account.

AWS STS AssumeRole Documentation:https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

by Pete at Apr 29, 2024, 12:36 AM

Limited Time Offer

25%

6 months ago

This is a tricky question about multi-factor authentication.

upvoted 0 times

...