Question 133 of 474 from exam DVA-C01: AWS Certified Developer - Associate

Question 133 of 474 from exam DVA-C01: AWS Certified Developer - Associate

Prev Question Next Question

Question

An application is making a request to AWS STS for temporary access credentials.

Below is the response being received. Which of the following is TRUE with regards to the above response?

<AssumeRoleResponse xmlns="https://sts.amazonaws .com/doc/2011-06-15/">
<AssumeRoleResult>
<Sourceldentity>DevUser123</Sourceldentity>
<Credentials>
<SessionToken>
AQoDYXdzEPT//////////wEXAMPLEtC764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
LWsKWHGBuF qwAeMi cRXmxfpSPfLeolYRqIf1fKD8YUUWthAx7mSEI/qkPpKPi/kMcGd
QrmGdeehM4IC1NtBmUpp2wUESphUZampKsburEDy@KPkyQDYwT 7WZOwqSVSXDVp75YU
SHFV1Rd8Tx6qg6fE8YQCHNVXAKiY9q6d+xoOrkwT38xVgr7ZD0UiPPKUL6411ZbqBAz
+scqKmlzm8FDrypNC9Yjc8fPOLNSFXSKSYVKTr4rvx3iST1TJabIQwj2ICCR/OLxBA==
</SessionToken>
<SecretAccessKey>
wJalrxUtnFEMI/K7MDENG/bPxRfiCYZEXAMPLEKEY
</SecretAccessKey>
<Expiration>2019-07-15723:28:33.359Z</Expiration>
<AccesskeyId>AKIAIOSFODNN7EXAMPLE</AccessKeyId>
</Credentials>
<AssumedRoleUser>
<Arn>arn:aws : sts: :123456789012: assumed-role/demo/John</Arn>
<AssumedRoleTd>ARO123EXAMPLE123 : John</AssumedRoleId>
</AssumedRoleUser>
<PackedPolicySize>6</PackedPolicysize>
</AssumeRoleResult>
<ResponseMetadata>
<RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
</ResponseMetadata>
</AssumeRoleResponse>

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - B.

Some of the aspects that get incorporated in the call to STS are.

The Amazon Resource Name (ARN) of the role that the app should assume.

The duration, which specifies the duration of the temporary security credentials.

A role session name, which is a string value that you can use to identify the session.

This value can be captured and logged by CloudTrail to help you distinguish between your role users during an audit.

Options A and D are incorrect because you need the session token to make requests to access other AWS resources.

Option C is incorrect because these tokens are short-lived.

For more information on temporary access credentials, please refer to the below URL-

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html