Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 283 discussion

Using MFA with AssumeRole (Optional) You can include multi-factor authentication (MFA) information when you call AssumeRole. This is useful for cross-account scenarios to ensure that the user that assumes the role has been authenticated with an AWS MFA device. In that scenario, the trust policy of the role being assumed includes a condition that tests for MFA authentication. If the caller does not include valid MFA information, the request to assume the role is denied.

MFA with AssumeRole always

D is the correct answer.

answer D

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_configure-api-require.html#:~:text=Call%20API%20operations%20that%20access%20resources%20in%20the%20same%20or,to%20restrict%20access%20to%20resources%20protected%20by%20resource%2Dbased%20policies.

answer Is D