Study. uk . com
  1. Home
  2. All questions
  3. Question 63

AWS Certified Solutions Architect study material · question 63 of 500

A workload running as GitHub Actions outside AWS needs to call AWS APIs without stored keys. Which federation approach fits?

  1. An EC2 instance profile shared with the runner
  2. OIDC federation with an IAM identity provider
  3. SAML federation using Active Directory Federation Services
  4. An IAM user with a rotated access key
Show the answer

Answer: B. OIDC federation with an IAM identity provider

OpenID Connect federation is what connects applications running outside AWS, such as GitHub Actions, to AWS resources without long-term keys.

Source: Identity providers and federation into AWS (Amazon Web Services) — Identity providers and federation into AWS

Challenge yourself on this topic → Study as cards