Study. uk . com
  1. Home
  2. All questions
  3. Question 10

AWS Certified Solutions Architect study material · question 10 of 500

Which AWS STS operation exchanges a SAML assertion from an external identity provider for temporary AWS credentials?

  1. GetSessionToken
  2. GetFederationToken
  3. AssumeRoleWithSAML
  4. AssumeRoleWithWebIdentity
Show the answer

Answer: C. AssumeRoleWithSAML

AssumeRoleWithSAML takes a SAML assertion; AssumeRoleWithWebIdentity is the operation that takes a JSON web token instead.

Source: Security best practices in IAM (Amazon Web Services) — Require workloads to use temporary credentials with IAM roles

Challenge yourself on this topic → Study as cards