AWS Certified Solutions Architect – Professional — Question 154

IAM users do not have permission to create Temporary Security Credentials for federated users and roles by default. In contrast, IAM users can call __________ without the need of any special permissions

Answer options

• A. GetSessionName
• B. GetFederationToken
• C. GetSessionToken
• D. GetFederationName

Correct answer: C

Explanation

The correct answer, GetSessionToken, allows IAM users to obtain temporary security credentials without needing special permissions. In contrast, GetFederationToken and GetSessionName require specific permissions that IAM users do not possess by default, while GetFederationName is not a valid AWS API call.