DVA-C02 · Question #654
A developer is building an application that authenticates users by using an external OpenID Connect (OIDC) identity provider (IdP). The developer needs to provide users with access to objects in an…
The correct answer is D. Create an Amazon Cognito identity pool by using the OIDC IdP and the IAM role. Use the identity. To integrate an OIDC identity provider and grant temporary AWS credentials to access resources like S3, the correct approach is to use an Amazon Cognito identity pool. It supports federated identities with OIDC IdPs and can be configured to allow users to assume an IAM role…
Question
A developer is building an application that authenticates users by using an external OpenID Connect (OIDC) identity provider (IdP). The developer needs to provide users with access to objects in an Amazon S3 bucket. The developer has created an IAM role that has an attached policy to allow access to the S3 bucket. The developer needs to grant users temporary credentials to assume the IAM role through the application. Which solution will meet this requirement?
Options
- ACall the AWS STS AssumeRole API operation with an OIDC access token to obtain temporary
- BCall the AWS STS AssumeRoleWithSAML API operation with an OIDC access token to obtain
- CCreate an Amazon Cognito user pool by using the OIDC IdP and the IAM role. Use the user pool
- DCreate an Amazon Cognito identity pool by using the OIDC IdP and the IAM role. Use the identity
How the community answered
(54 responses)- A2% (1)
- B9% (5)
- C6% (3)
- D83% (45)
Explanation
To integrate an OIDC identity provider and grant temporary AWS credentials to access resources like S3, the correct approach is to use an Amazon Cognito identity pool. It supports federated identities with OIDC IdPs and can be configured to allow users to assume an IAM role with permissions to access AWS services. This meets the requirement with minimal effort and proper
Community Discussion
No community discussion yet for this question.