Advanced Identity

Question 1

AWS STS (Security Token Service)

Answer 1

Temporary limited-privileges credentials
Short term creds

Question 2

STS IAM interaction

Answer 2

Temporarily assume a role

Question 3

Cognito

Answer 3

Identity for web and mobile app users
IDP or Federated with Facebook, Google, etc.

Question 4

AWS IAM Identity Center

Answer 4

SSO
SAML 2.0
AWS accounts in AWS Organizations