Exam AWS Certified Developer Associate topic 1 question 300 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 300
Topic #: 1

[All AWS Certified Developer Associate Questions]

A new mobile app uses Amazon Cognito web identity federation. Immediately after a user logs in, the following error occurs:

AccessDenied -- Not authorized to perform sts:AssumeRoleWithWebIdentity

A developer determines that the Amazon Cognito configuration appears to be correct.

Which of the following could be the cause of the error?

A. The app’s developer incorrectly defined the authenticated principal role access policy.
B. The app could not confirm the user in the user pool.
C. The app could not properly authenticate the user with the identity provider.
D. The app’s developer incorrectly defined the authenticated principal role trust policy.

Show Suggested Answer

Suggested Answer: D 🗳️

by IvanPetrovichPavlov at Nov. 24, 2022, 10:16 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Ankit1010

Highly Voted 2 years, 3 months ago

C The error message "AccessDenied -- Not authorized to perform sts:AssumeRoleWithWebIdentity" indicates that there was a problem with assuming the role associated with the authenticated principal in the AWS Security Token Service (STS). This error could be caused by a failure to properly authenticate the user with the identity provider. When a user logs in to an app that uses Amazon Cognito web identity federation, the app obtains temporary AWS credentials that allow it to access AWS services on behalf of the user. These credentials are obtained by exchanging the user's identity token, obtained from the identity provider, for temporary AWS credentials using the AssumeRoleWithWebIdentity API in AWS STS. If there is an issue with the authentication process, the app may not be able to obtain valid temporary credentials, leading to the "AccessDenied" error message. This is a common cause of errors when using web identity federation with Amazon Cognito.

upvoted 5 times

...

IvanPetrovichPavlov

Highly Voted 2 years, 6 months ago

Selected Answer: D

needs a trust policy to define authenticated role

upvoted 5 times

...

AWSdeveloper08

Most Recent 1 year, 10 months ago

Selected Answer: D

Choosen D, bcox of the following reason. Please check the link below https://stackoverflow.com/questions/66405794/not-authorized-to-perform- stsassumerolewithwebidentity-403

upvoted 1 times

...