Discuss Amazon CLF-C02 Exam Topic 1 Question 5

A company is building an application in the AWS Cloud. The company wants to use temporary credentials for the application to access other AWS resources.

Which AWS service will meet these requirements?

AAWS Key Management Service (Aws KMS)

BAWS CloudHSM

CAmazon Cognito

DAWS Security Token Service (Aws STS)

Suggested Answer: D

AWS Security Token Service (AWS STS) is a service that provides temporary security credentials to users or applications that need to access AWS resources. The temporary credentials have a limited lifetime and can be configured to last from a few minutes to several hours. The credentials are not stored with the user or application, but are generated dynamically and provided on request.The credentials work almost identically to long-term access key credentials, but have the advantage of not requiring distribution, rotation, or revocation1.

AWS Key Management Service (AWS KMS) is a service that provides encryption and decryption services for data and keys.It does not provide temporary security credentials2.

AWS CloudHSM is a service that provides hardware security modules (HSMs) for cryptographic operations and key management.It does not provide temporary security credentials3.

Amazon Cognito is a service that provides user authentication and authorization for web and mobile applications.It can also provide temporary security credentials for authenticated users, but not for applications4.

Get Premium CLF-C02 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Leanna 11 months ago

I thought STS was mainly for federated access, not just temp creds?

Ryann 11 months ago

KMS and CloudHSM are not for temporary access, just saying.

Benedict 11 months ago

Wait, isn't Cognito also for managing credentials?

Lynda 12 months ago

Totally agree, STS is perfect for this use case.

Gaynell 12 months ago

AWS STS is the right choice for temporary credentials!

Sabina 1 year ago

I’m leaning towards AWS STS too, but I wonder if there are any edge cases where Cognito could be relevant for temporary access.

Emilio 1 year ago

I feel like AWS KMS and CloudHSM are more about encryption and key management, so they probably aren't the right choice here.

Eleonore 1 year ago

I remember practicing a question about AWS services for authentication, and I think Amazon Cognito was mentioned, but it seems more focused on user sign-in rather than temporary access.

Pilar 1 year ago

I think the answer might be AWS STS because it deals with temporary credentials, but I'm not completely sure.

Olene 1 year ago

I'm a little confused by the options here. AWS KMS and AWS CloudHSM seem more focused on encryption and key management, so I don't think those are the right answers. I'm leaning towards Amazon Cognito or AWS STS, but I'll have to double-check the details.

Chantell 1 year ago

Okay, I've got a strategy for this. The question is asking for a service that provides temporary credentials, so I need to think about which AWS service handles authentication and authorization. AWS STS sounds like the right answer.

Jerry 1 year ago

Hmm, I'm a bit unsure about this one. I know AWS has a lot of different services, and it's not always easy to remember which one does what. I'll have to think this through carefully.

Leatha 1 year ago

This one seems straightforward. I think AWS Security Token Service (AWS STS) is the service that provides temporary credentials for accessing other AWS resources.

Mila 1 year ago

Okay, the key details I see are that the zone is not yet booted, and it has a virtual network interface. I think I can use that information to narrow down the correct options.

Freida 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to review the material on asset management and importing data to see if I can figure out the right answer.

Barney 1 year ago

My gut says it has to do with Service Loose Coupling since reusable services should definitely be independent to manage performance better.

Jess 1 year ago

If I recall correctly, I need to apply the Gordon Growth Model here, right? I wonder if the increase in growth offsetting the rise in cost of equity actually results in a net positive effect on the share price.

Amazon CLF-C02 Exam - Topic 1 Question 5 Discussion