Amazon DVA-C02 Exam - Topic 7 Question 25 Discussion

Actual exam question for Amazon's DVA-C02 exam

Question #: 25
Topic #: 7

A developer must use multi-factor authentication (MFA) to access data in an Amazon S3 bucket that is in another AWS account. Which AWS Security Token Service (AWS STS) API operation should the developer use with the MFA information to meet this requirement?

AAssumeRoleWithWebidentity

BGetFederationToken

CAssumeRoleWithSAML

DAssumeRole

Show Suggested Answer

Suggested Answer: D

AWS STS AssumeRole:The central operation for assuming temporary security credentials, commonly used for cross-account access.

MFA Integration:TheAssumeRolecall can include MFA information to enforce multi-factor authentication.

Credentials for S3 Access:The returned temporary credentials would provide the necessary permissions to access the S3 bucket in the other account.

AWS STS AssumeRole Documentation:https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

by Pete at Apr 29, 2024, 12:36 AM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Margart

9 months ago

Surprised that it's not just AssumeRole!

upvoted 0 times

...

Thad

9 months ago

I thought GetFederationToken was the way to go.

upvoted 0 times

...

Rodolfo

10 months ago

Wait, is AssumeRoleWithWebidentity even relevant here?

upvoted 0 times

...

Elza

10 months ago

Totally agree, that's the right choice!

upvoted 0 times

...

Mila

10 months ago

Gotta use AssumeRoleWithSAML for MFA access.

upvoted 0 times

...

Lilli

10 months ago

I feel like I saw something about GetFederationToken in a practice exam, but I can't remember if it was the right choice for MFA scenarios.

upvoted 0 times

...

Vicente

11 months ago

I have a vague memory that AssumeRoleWithWebidentity is more for web applications, so I don't think that's it.

upvoted 0 times

...

Lynette

11 months ago

I remember practicing a question about using MFA with STS, and I feel like AssumeRoleWithSAML could be relevant, but I can't recall the details.

upvoted 0 times

...

Laurel

11 months ago

I think the answer might be D, AssumeRole, but I'm not entirely sure if it requires MFA specifically.

upvoted 0 times

...

Gene

11 months ago

I think the answer is AssumeRole, since that's the most common STS operation and it supports MFA. But I'm not 100% sure, so I'll double-check the details.

upvoted 0 times

...

Audra

11 months ago

Okay, the key here is that the developer needs to use MFA to access the data. That means they'll need to use one of the STS operations that supports MFA.

upvoted 0 times

...

Pamella

11 months ago

Hmm, I'm not entirely sure about the differences between all the STS operations. I'll need to think this through carefully.

upvoted 0 times

...

Aileen

11 months ago

This looks like a pretty straightforward question about AWS STS operations. I'm pretty confident I can figure this out.

upvoted 0 times

...

Corinne

11 months ago

I'm a bit confused by the different STS operations and when to use each one. I'll need to review the documentation to make sure I understand the differences.

upvoted 0 times

...

Katina

11 months ago

Hmm, I'm not totally sure about this one. I know we need to manage large sets of Vulnerable items, but I'm not familiar with the different options like Vulnerability Groups, Calculator Group, or Filter Group. I'll have to think this through carefully.

upvoted 0 times

...