SAA-C03 Q49 · Security

Question

A company is developing a public web application that needs to access multiple AWS services. The application will have hundreds of users who must log in to the application first before using the services. The company needs to implement a secure and scalable method to grant the web application temporary access to the AWS resources. Which solution will meet these requirements?

Accepted Answer

**Option B** satisfies every requirement:

1. **Temporary access**: AWS STS (Security Token Service) issues **temporary security credentials** (access key, secret key, session token) that automatically expire. This is the gold standard for granting short-lived access.

2. **Secure**: No long-term credentials are stored anywhere. The application assumes an IAM role via `sts:AssumeRole`, and the returned credentials are valid only for a limited duration (15 minutes to 12 hours by default).

3. **Scalable**: A single IAM role can be assumed by hundreds (or millions) of users/sessions. You don't need to create separate credentials per user — each `AssumeRole` call generates a unique set of temporary credentials scoped to that role's permissions.

4. **Multiple AWS services**: The IAM role's po

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips