SAA-C03 · Question #487
A company needs to provide a team of contractors with temporary access to the company's AWS resources for a short-term project. The contractors need different levels of access to AWS services. The…
The correct answer is B. Use AWS Security Token Service (AWS STS) to generate temporary credentials for the. AWS STS issues temporary credentials with automatically expiring permissions based on IAM roles. This eliminates the need to manually manage or deactivate IAM users. "You can use AWS STS to grant temporary security credentials that automatically expire after a specified…
Question
A company needs to provide a team of contractors with temporary access to the company's AWS resources for a short-term project. The contractors need different levels of access to AWS services. The company needs to revoke permissions for all the contractors when the project is finished. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AUse AWS IAM to create a user account for each contractor. Attach policies that define access
- BUse AWS Security Token Service (AWS STS) to generate temporary credentials for the
- CConfigure AWS Config rules to monitor the contractors' access patterns. Use AWS Config rules to
- DUse AWS CloudTrail and custom Amazon EventBridge triggers to audit the contractors' actions.
How the community answered
(38 responses)- A3% (1)
- B89% (34)
- C3% (1)
- D5% (2)
Explanation
AWS STS issues temporary credentials with automatically expiring permissions based on IAM roles. This eliminates the need to manually manage or deactivate IAM users. "You can use AWS STS to grant temporary security credentials that automatically expire after a specified duration." This is the least operational overhead and follows AWS best practices for short-term access.
Community Discussion
No community discussion yet for this question.