AWS Certified Developer Associate · Free Practice Question Medium
Question 33
A Developer is trying to make API calls using AWS SDK. The IAM user credentials used by the application require multi-factor authentication for all API calls.
Which method should the Developer use to access the multi-factor authentication protected API?
-
A
DecodeAuthorizationMessage -
B
GetCallerIdentity -
C
GetSessionToken -
D
GetFederationToken
Reveal correct answer
Correct answer: C
Explanation
The GetSessionToken API call returns a set of temporary credentials for an AWS account or IAM user. The credentials consist of an access key ID, a secret access key, and a security token. Typically, you use GetSessionToken if you want to use MFA to protect programmatic calls to specific AWS API operations
Therefore, the Developer can use GetSessionToken with an MFA device to make secure API calls using the AWS SDK.
CORRECT: "GetSessionToken" is the correct answer.
INCORRECT: "GetFederationToken" is incorrect as this is used with federated users to return a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token).
INCORRECT: "GetCallerIdentity" is incorrect as this API action returns details about the IAM user or role whose credentials are used to call the operation.
INCORRECT: "DecodeAuthorizationMessage" is incorrect as this API action decodes additional information about the authorization status of a request from an encoded message returned in response to an AWS request.
References:
https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
