IdentityFederation

Question 1

Define Identity Federation

Answer 1

The process of swapping or exchanging external identities for AWS Credentials

Question 2

AWS Resources can be accessed by which trusted identities?

Answer 2

AWS resources can ONLY be accessed by AWS Identities or Trusted Authenticated identities

Question 3

Identity provider can only be used with ____________ compatible provider

Answer 3

Identity provider can only be used with SAML 2.0 compatible provider.

It MUST be used with an infrastructure already using SAML 2.0 compatible provider

Question 4

Google, Twitter, Facebook, Web are good examples of _______________2.0_____________

Answer 4

INCOMPATIBLE identity source

Question 5

SAML 2.0 Validity

Answer 5

up to 12hrs with AWS

Question 6

SAML Asertion

Answer 6

Token from an IDP that’s to be presented to the CLI or SDK during Auth and Auth.

SAML (Security Assertion Markup Language) assertion is a digital statement or assertion that is issued by an identity provider (IdP) and presented to a service provider (SP) as part of a SAML-based single sign-on (SSO) or authentication process. SAML assertions are a crucial component of SAML-based authentication and authorization.