Which AWS service issues temporary, expiring security tokens to assume roles (cross-account, federated, or via web identity)?
AAmazon RDS
BAWS Snowball
CAWS Security Token Service (STS)
DAmazon Route 53
Answer & Solution
Correct answer: C. AWS Security Token Service (STS)
STS is AWS's short-lived-credential issuer (per DOP-C02 §6.1).
The others aren't credential services.
Keep practising Dopsecurity
Browse all Dopsecurity questions for AWS DevOps Pro, or explore more Cloudcomputing topics.