Cross-Account Access Patterns Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Identity Federation

What you'll be asked

  1. What is the primary purpose of Identity Federation in a cross-account environment?
  2. When configuring an IAM Role for cross-account access, which policy must be configured in the target account to allow a user from an external account to assume the role?
  3. An administrator wants to ensure that only users from a specific corporate identity provider (IdP) can access their cloud resources. Which protocol is most commonly used for this federation?
  4. A developer needs to access an S3 bucket in Account B from Account A. The developer has an IAM role in Account A. What is the minimum set of permissions required to enable this?
  5. You are implementing cross-account access using OIDC (OpenID Connect). If an attacker manages to steal the temporary security credentials generated by a successful STS AssumeRole call, what is the most effective mitigation to limit the blast radius?

Answers and explanations come after you submit.