MENU
A developer must use multi-factor authentication (MFA) to access data in an Amazon S3 bucket that is in another AWS account. Which AWS Security Token Service (AWS STS) API operation should the developer use with the MFA information to meet this requirement?
Suggested Answer: D
Get Premium DVA-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
AWS STS AssumeRole:The central operation for assuming temporary security credentials, commonly used for cross-account access.
MFA Integration:TheAssumeRolecall can include MFA information to enforce multi-factor authentication.
Credentials for S3 Access:The returned temporary credentials would provide the necessary permissions to access the S3 bucket in the other account.
22 comments · newest first
MA
Margart
11 months ago
Surprised that it's not just AssumeRole!
TH
Thad
11 months ago
I thought GetFederationToken was the way to go.
RO
Rodolfo
11 months ago
Wait, is AssumeRoleWithWebidentity even relevant here?
EL
Elza
11 months ago
Totally agree, that's the right choice!
MI
Mila
12 months ago
Gotta use AssumeRoleWithSAML for MFA access.
LI
Lilli
12 months ago
I feel like I saw something about GetFederationToken in a practice exam, but I can't remember if it was the right choice for MFA scenarios.
VI
Vicente
1 year ago
I have a vague memory that AssumeRoleWithWebidentity is more for web applications, so I don't think that's it.
LY
Lynette
1 year ago
I remember practicing a question about using MFA with STS, and I feel like AssumeRoleWithSAML could be relevant, but I can't recall the details.
LA
Laurel
1 year ago
I think the answer might be D, AssumeRole, but I'm not entirely sure if it requires MFA specifically.
GE
Gene
1 year ago
I think the answer is AssumeRole, since that's the most common STS operation and it supports MFA. But I'm not 100% sure, so I'll double-check the details.
AU
Audra
1 year ago
Okay, the key here is that the developer needs to use MFA to access the data. That means they'll need to use one of the STS operations that supports MFA.
PA
Pamella
1 year ago
Hmm, I'm not entirely sure about the differences between all the STS operations. I'll need to think this through carefully.
AI
Aileen
1 year ago
This looks like a pretty straightforward question about AWS STS operations. I'm pretty confident I can figure this out.
CO
Corinne
1 year ago
I'm a bit confused by the different STS operations and when to use each one. I'll need to review the documentation to make sure I understand the differences.
KA
Katina
1 year ago
Hmm, I'm not totally sure about this one. I know we need to manage large sets of Vulnerable items, but I'm not familiar with the different options like Vulnerability Groups, Calculator Group, or Filter Group. I'll have to think this through carefully.
IR
Ira
1 year ago
I feel like I saw something about these in a similar question, maybe Service Composability is among them too?
SH
Sherron
2 years ago
Yes, you’re right. AssumeRole is the best suited for MFA in such cross-account scenarios.
LU
Luisa
2 years ago
But doesn't AssumeRole alone require additional permissions? MFA info should specifically be used with AssumeRole.
ME
Meaghan
2 years ago
Hmm, AssumeRoleWithSAML is for SAML-based authentication. I think it's AssumeRole.
FL
Fletcher
2 years ago
I think the correct answer is AssumeRoleWithSAML.
LU
Luisa
2 years ago
Yeah, it's about accessing Amazon S3 from another AWS account.
SH
Sherron
2 years ago
This is a tricky question about multi-factor authentication.