Review Mode Practice Set 5 – Q6

Hello, the explanation of this question says: “All of the options given provide temporary credentials to make API calls
against AWS resources, but GetSessionToken is the only API that
supports MFA”.

However, AssumeRole is defined like – “It is useful for allowing existing IAM users
to access AWS resources that they don’t already have access to. For
example, the user might need access to resources in another AWS account.
It is also useful as a means to temporarily gain privileged access—for
example, to provide multi-factor authentication (MFA). You must call
this API using existing IAM user credentials”.

That clearly indicates that AssumeRole also supports MFA so GetSessionToken is not the only API that supports MFA. Could you clarify this point? Thank you in advance.