DOP-C02 · Question #212
A company is refactoring applications to use AWS. The company identifies an internal web application that needs to make Amazon S3 API calls in a specific AWS account. The company wants to use its…
The correct answer is B. Create an IAM IdP by using the provider URL, audience, and signature from the existing IP. D. Create an IAM role that has a policy that allows the necessary S3 actions. Configure the role's E. Configure the web application to use the AssumeRoleWithWebIdentity API operation to retrieve. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_oidc.html
Question
A company is refactoring applications to use AWS. The company identifies an internal web application that needs to make Amazon S3 API calls in a specific AWS account. The company wants to use its existing identity provider (IdP) auth.company.com for authentication. The IdP supports only OpenID Connect (OIDC). A DevOps engineer needs to secure the web application's access to the AWS account. Which combination of steps will meet these requirements? (Choose three.)
Options
- AConfigure AWS IAM Identity Center (AWS Single Sign-On). Configure an IdP. Upload the IdP
- BCreate an IAM IdP by using the provider URL, audience, and signature from the existing IP.
- CCreate an IAM role that has a policy that allows the necessary S3 actions. Configure the role's
- DCreate an IAM role that has a policy that allows the necessary S3 actions. Configure the role's
- EConfigure the web application to use the AssumeRoleWithWebIdentity API operation to retrieve
- FConfigure the web application to use the GetFederationToken API operation to retrieve temporary
How the community answered
(26 responses)- A27% (7)
- B58% (15)
- C12% (3)
- F4% (1)
Explanation
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_oidc.html
Topics
Community Discussion
No community discussion yet for this question.