AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 53

Question

A-company uses a third-party identity provider and SAML-based SSO for its AWS accounts. After the third-party identity provider renewed an expired signing certificate, users saw the following message when trying to log in: Error: Response Signature Invalid (Service: AWSSecurityTokenService; Status Code: 400; Error Code: InvalidIdentityToken) A security engineer needs to provide a solution that corrects the error and minimizes operational overhead. Which solution meets these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Download the updated SAML metadata file from the identity service provider. Update the file in the AWS identity provider entity defined in AWS Identity and Access Management (IAM) by using the AWS CLI. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Security - Specialty SCS-C02 — Question 53