Advanced Identity

Question 1

AWS STS (Security Token Service)

Answer 1

• Create temporary, limited-privilege credentials to access AWS resources
• Short-term credentials: you configure expiration period

Question 2

AWS STS (Security Token Service) Use Casses

Answer 2

• Identity federation: manage user identities in external systems, and provide STS tokens to access AWS resources
• IAM Roles for cross/same account access
• IAM Roles for EC2: temp credentials for EC2 instances to access resources

Question 3

Amazon Cognito

Answer 3

• Identity for your Web and Mobile app users
• Use instead of IAM

Question 4

AWS IAM Identity Center

Answer 4

One login (single sign-on) for all your:
* AWS account in AWS Orgs
* Business cloud apps
* SAML2.0-enabled application
* EC2 Windows Instances