Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Learn AWS > AWS STS > Flashcards

AWS STS Flashcards

(90 cards)

Start Studying
1
Q

What does STS stand for in AWS?

A

Security Token Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False: AWS STS allows users to create temporary security credentials.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Fill in the blank: AWS STS is primarily used for _____ authentication.

A

temporary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the maximum duration for which AWS STS credentials can be valid?

A

12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which AWS service can be used to assume a role and gain temporary access to AWS resources?

A

AWS STS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What API action is used to request temporary security credentials in AWS STS?

A

AssumeRole

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

True or False: Temporary security credentials provided by AWS STS are long-lived.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the three components of temporary security credentials provided by AWS STS?

A

Access key ID, secret access key, session token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Multiple Choice: Which of the following is NOT a use case for AWS STS? A) Cross-account access B) Federated user access C) Long-term IAM user creation

A

C) Long-term IAM user creation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the purpose of the AssumeRoleWithWebIdentity API call?

A

To allow users to access AWS resources using web identity tokens from providers like Google or Facebook.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False: AWS STS can be used to grant permissions to users from outside of your AWS account.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What type of policy can be attached to a role assumed via AWS STS?

A

IAM policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Fill in the blank: The AWS STS service is region-specific and must be called from a _____ region.

A

specific

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which AWS STS feature allows users to delegate access to AWS resources without sharing long-term credentials?

A

Assuming roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the difference between AssumeRole and AssumeRoleWithSAML?

A

AssumeRole is for AWS IAM roles, while AssumeRoleWithSAML is for SAML-based federated authentication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True or False: AWS STS supports the use of access policies to control the permissions of temporary security credentials.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the main benefit of using AWS STS for cross-account access?

A

It allows for secure and temporary access without sharing long-term credentials.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Multiple Choice: Which of the following is a valid AWS STS API action? A) CreateTemporaryCredentials B) GetSessionToken C) UpdateRole

A

B) GetSessionToken

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a key advantage of using temporary credentials over long-term credentials?

A

Reduced risk of credential compromise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Fill in the blank: The session token issued by AWS STS is required to make requests using temporary credentials, and it must be included in the _____ header.

A

Authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the purpose of the GetFederationToken API call in AWS STS?

A

To provide temporary credentials for federated users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

True or False: AWS STS can issue credentials based on a predefined IAM policy.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the maximum number of roles that can be assumed in a single AssumeRole call?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Multiple Choice: Which of the following scenarios would NOT benefit from AWS STS? A) A web application granting temporary access to users B) A single AWS account managing all resources C) A mobile app accessing AWS resources securely

A

B) A single AWS account managing all resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is the session name parameter used for in the AssumeRole API?
To identify the session and provide an audit trail.
26
Fill in the blank: AWS STS is often used in conjunction with _____ to provide access to AWS resources.
IAM roles
27
What does the expiration time of temporary credentials provided by AWS STS indicate?
The time after which the credentials will no longer be valid.
28
True or False: You can use AWS STS to create a new IAM user.
False
29
What is an example of a service that can integrate with AWS STS for federated authentication?
Amazon Cognito
30
Multiple Choice: Which of the following is a feature of AWS STS? A) Long-term credential management B) Temporary security credentials C) User account creation
B) Temporary security credentials
31
What is the role of the policy document in the AssumeRole API call?
To define the permissions that the assumed role has.
32
True or False: AWS STS can be used to provide access to on-premises applications.
True
33
What is the primary use case for the GetSessionToken API action?
To obtain temporary credentials for IAM users.
34
Fill in the blank: AWS STS can be used with _____ to enable single sign-on (SSO) capabilities.
SAML
35
What is the significance of the 'external ID' parameter when assuming a role?
It adds an additional layer of security to prevent the confused deputy problem.
36
Multiple Choice: Which of the following does NOT require AWS STS? A) Cross-account access B) Temporary access for users C) Long-term IAM user access
C) Long-term IAM user access
37
True or False: AWS STS is a global service and does not require region specification.
False
38
What is the primary benefit of using AWS STS in a multi-account AWS architecture?
Simplified management of permissions and access across accounts.
39
What is the role of the session duration parameter in AssumeRole?
It specifies the duration for which the temporary credentials are valid.
40
Fill in the blank: AWS STS can issue temporary credentials that can be used to access _____ resources.
AWS
41
What is the purpose of the AssumeRoleWithSAML API?
To allow users to assume a role based on SAML assertions.
42
True or False: AWS STS can be used to limit access based on IP address.
True
43
What is a common use case for AWS STS in mobile applications?
Providing temporary access to AWS resources for mobile users.
44
Multiple Choice: Which AWS STS feature is used for granting access to IAM roles? A) Temporary security credentials B) Long-term access keys C) IAM user creation
A) Temporary security credentials
45
What type of users can benefit from using AWS STS?
Federated users and IAM users needing temporary access.
46
What does STS stand for in AWS?
Security Token Service
47
True or False: AWS STS allows users to create temporary security credentials.
True
48
Fill in the blank: AWS STS is primarily used for _____ authentication.
temporary
49
What is the maximum duration for which AWS STS credentials can be valid?
12 hours
50
Which AWS service can be used to assume a role and gain temporary access to AWS resources?
AWS STS
51
What API action is used to request temporary security credentials in AWS STS?
AssumeRole
52
True or False: Temporary security credentials provided by AWS STS are long-lived.
False
53
What are the three components of temporary security credentials provided by AWS STS?
Access key ID, secret access key, session token
54
Multiple Choice: Which of the following is NOT a use case for AWS STS? A) Cross-account access B) Federated user access C) Long-term IAM user creation
C) Long-term IAM user creation
55
What is the purpose of the AssumeRoleWithWebIdentity API call?
To allow users to access AWS resources using web identity tokens from providers like Google or Facebook.
56
True or False: AWS STS can be used to grant permissions to users from outside of your AWS account.
True
57
What type of policy can be attached to a role assumed via AWS STS?
IAM policy
58
Fill in the blank: The AWS STS service is region-specific and must be called from a _____ region.
specific
59
Which AWS STS feature allows users to delegate access to AWS resources without sharing long-term credentials?
Assuming roles
60
What is the difference between AssumeRole and AssumeRoleWithSAML?
AssumeRole is for AWS IAM roles, while AssumeRoleWithSAML is for SAML-based federated authentication.
61
True or False: AWS STS supports the use of access policies to control the permissions of temporary security credentials.
True
62
What is the main benefit of using AWS STS for cross-account access?
It allows for secure and temporary access without sharing long-term credentials.
63
Multiple Choice: Which of the following is a valid AWS STS API action? A) CreateTemporaryCredentials B) GetSessionToken C) UpdateRole
B) GetSessionToken
64
What is a key advantage of using temporary credentials over long-term credentials?
Reduced risk of credential compromise
65
Fill in the blank: The session token issued by AWS STS is required to make requests using temporary credentials, and it must be included in the _____ header.
Authorization
66
What is the purpose of the GetFederationToken API call in AWS STS?
To provide temporary credentials for federated users.
67
True or False: AWS STS can issue credentials based on a predefined IAM policy.
True
68
What is the maximum number of roles that can be assumed in a single AssumeRole call?
One
69
Multiple Choice: Which of the following scenarios would NOT benefit from AWS STS? A) A web application granting temporary access to users B) A single AWS account managing all resources C) A mobile app accessing AWS resources securely
B) A single AWS account managing all resources
70
What is the session name parameter used for in the AssumeRole API?
To identify the session and provide an audit trail.
71
Fill in the blank: AWS STS is often used in conjunction with _____ to provide access to AWS resources.
IAM roles
72
What does the expiration time of temporary credentials provided by AWS STS indicate?
The time after which the credentials will no longer be valid.
73
True or False: You can use AWS STS to create a new IAM user.
False
74
What is an example of a service that can integrate with AWS STS for federated authentication?
Amazon Cognito
75
Multiple Choice: Which of the following is a feature of AWS STS? A) Long-term credential management B) Temporary security credentials C) User account creation
B) Temporary security credentials
76
What is the role of the policy document in the AssumeRole API call?
To define the permissions that the assumed role has.
77
True or False: AWS STS can be used to provide access to on-premises applications.
True
78
What is the primary use case for the GetSessionToken API action?
To obtain temporary credentials for IAM users.
79
Fill in the blank: AWS STS can be used with _____ to enable single sign-on (SSO) capabilities.
SAML
80
What is the significance of the 'external ID' parameter when assuming a role?
It adds an additional layer of security to prevent the confused deputy problem.
81
Multiple Choice: Which of the following does NOT require AWS STS? A) Cross-account access B) Temporary access for users C) Long-term IAM user access
C) Long-term IAM user access
82
True or False: AWS STS is a global service and does not require region specification.
False
83
What is the primary benefit of using AWS STS in a multi-account AWS architecture?
Simplified management of permissions and access across accounts.
84
What is the role of the session duration parameter in AssumeRole?
It specifies the duration for which the temporary credentials are valid.
85
Fill in the blank: AWS STS can issue temporary credentials that can be used to access _____ resources.
AWS
86
What is the purpose of the AssumeRoleWithSAML API?
To allow users to assume a role based on SAML assertions.
87
True or False: AWS STS can be used to limit access based on IP address.
True
88
What is a common use case for AWS STS in mobile applications?
Providing temporary access to AWS resources for mobile users.
89
Multiple Choice: Which AWS STS feature is used for granting access to IAM roles? A) Temporary security credentials B) Long-term access keys C) IAM user creation
A) Temporary security credentials
90
What type of users can benefit from using AWS STS?
Federated users and IAM users needing temporary access.

Learn AWS (126 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions