A company uses LDAP-based credentials and has a Security Assertion Markup Language (SAML) 2.0 identity provider. A SysOps administrator has configured various federated roles in a new AWS account to provide AWS Management Console access for groups of users that use the existing LDAP-based credentials. Several groups want to use the AWS CLI on their workstations to automate daily tasks. To enable them to do so, the SysOps administrator has created an application that authenticates a user and generates a SAML assertion Which API call should be used to retrieve credentials for federated programmatic access?
A) sts:AssumeRole
B) sts:AssumeRoleWithSAML
C) sts:AssumeRoleWithWebIdentity
D) sts:GetFederationToken

Question

Quizplus · Accepted Answer

The sts:AssumeRoleWithSAML API call is used to obtain temporary security credentials for users who have been authenticated via SAML, which is the scenario described.

A Company Uses LDAP-Based Credentials and Has a Security Assertion