AWS Certified Data Analytics Specialty 2021 – Hands-On - STS and Cross Account Access

The video tutorial explains AWS Security Token Service (STS), which provides temporary and limited access to AWS resources. It is primarily used for cross-account access and federation, allowing users from one AWS account to access resources in another. STS can also be used for federating non-AWS users through Active Directory, SAML, or single sign-on. The tutorial covers the Assume Role API, which enables users to impersonate IAM roles with temporary credentials. The next lecture will delve deeper into federation.

What is the primary purpose of the Security Token Service (STS) in AWS?

• To grant temporary access to AWS resources

• To manage AWS billing and costs

• To provide permanent access to AWS resources

• To monitor AWS service health

Which of the following is a common use case for STS?

• Monitoring AWS service health

• Cross-account access

• Creating AWS billing reports

• Managing AWS service limits

How long can the temporary credentials obtained through STS be valid?

• Up to 24 hours

• Up to 15 minutes

• Up to 1 hour

• Up to 5 minutes

What is the AssumeRole API used for in the context of STS?

• To delete AWS resources

• To create new IAM users

• To monitor AWS service health

• To retrieve temporary credentials for an IAM role

What is the main benefit of using the AssumeRole API with STS?

• It enables real-time monitoring of AWS services

• It simplifies the process of gaining temporary security credentials

• It provides permanent access to AWS resources

• It allows for direct access to AWS billing