Which service offers the capability to obtain temporary, privileged credentials for making authenticated requests to various resources, particularly in scenarios involving identity federation or cross-account access?
Key Management Service
Security Token Service
Simple Storage Service
Cognito User Identity Pools
The correct service for retrieving short-term, privileged credentials is the Security Token Service, which is often used in conjunction with federated user authentication or for assuming roles. These credentials are constrained by time and the permissions defined in their associated policies, fostering a secure environment that adheres to the principle of least privilege. The Security Token Service is a component of the overarching identity management system provided by AWS but specializes in this temporary credential issuance. In comparison, Cognito is mostly oriented towards user identity and access management in apps, whereas the Key Management Service is involved in creating and controlling encryption keys, not in issuing temporary security credentials based on permission policies.
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
All IT & Cybersecurity Package plans include the following perks and exams .
Our pricing is simple. Full access to all certifications and exams in each package, for one price.
As many practice tests for as many topics as you want.
Use study mode non-stop, no limits.
Access to our AI assistant, Bash, trained to help you pass your exam.
Track your scores over time in study mode and report cards.
See how you improve over time, and where you need to focus.
Access our store with even bigger discounts than before.
Unlimited access to all performance questions and be prepared for the real thing.
All IT & Cybersecurity Package plans include unlimited access to the following study materials.
Create an account or sign in to access our study materials.