Free AWS DVA-C02 Actual Exam Questions - Question 15 Discussion
is in another AWS account. Which AWS Security Token Service (AWS STS) API operation should the
developer use with the MFA information to meet this requirement?
It’s D because AssumeRole lets you pass MFA tokens directly for cross-account access without needing web identity or SAML setup. The others are more for federated users, so they don’t fit here.
Maybe D here too, since AssumeRole lets you pass MFA tokens when switching roles across accounts. The others seem more tied to web identity or SAML federation, which the question doesn’t mention.
D/C? AssumeRole is common for cross-account access with MFA, but AssumeRoleWithSAML also supports MFA if using SAML federation. Depends on the setup, but D seems straightforward for general cross-account role assumption.
D, because AssumeRole supports MFA when switching roles across accounts.
B tbh doesn’t fit because GetFederationToken is more for temporary credentials without role assumption. Since the dev needs to access cross-account S3 data with MFA, assuming a role makes more sense.
C, AWS X-Ray is usually for tracing Lambda issues.