Exams / DVA-C02 / API authorisation and tokens

API authorisation and tokens: DVA-C02 practice questions

3 free questions on API authorisation and tokens, from the Security domain (26% of the DVA-C02 exam guide). Every question is original and explains why each option is right or wrong.

Questions

1. A REST API in Amazon API Gateway is used by partner companies. The partners obtain opaque access tokens from a third-party OAuth provider, and the only way to validate a token is…Medium
2. An internal service running on Amazon ECS calls a REST API in Amazon API Gateway. The developer wants only callers with a specific IAM role, the ECS task role, to be able to…Medium · choose 2
3. A company exposes a public REST API in Amazon API Gateway that must only accept requests coming from two corporate office IP address ranges. The developer wants to enforce this…Medium

Study API authorisation and tokens

• Controlling access to a REST API

More Security topics

• Amazon Cognito and federated access (3)
• IAM roles, policies and STS (3)
• Encryption with AWS KMS (3)
• Certificates and encryption in transit (2)
• Secrets and sensitive data (3)