Cross-Account Access Patterns Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering Identity Federation

Cross-Account Access Patterns Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    What is the primary purpose of Identity Federation in a cross-account environment?

  2. 2

    When configuring an IAM Role for cross-account access, which policy must be configured in the target account to allow a user from an external account to assume the role?

  3. 3

    An administrator wants to ensure that only users from a specific corporate identity provider (IdP) can access their cloud resources. Which protocol is most commonly used for this federation?

  4. 4

    A developer needs to access an S3 bucket in Account B from Account A. The developer has an IAM role in Account A. What is the minimum set of permissions required to enable this?

  5. 5

    You are implementing cross-account access using OIDC (OpenID Connect). If an attacker manages to steal the temporary security credentials generated by a successful STS AssumeRole call, what is the most effective mitigation to limit the blast radius?