Examkin

Question

Difficulty: EasyApplication Authentication and Authorization with Amazon Cognito

A developer is creating a web application and needs to provide a secure sign-up, sign-in, and password reset workflow for the application's users. The developer must also maintain a user directory to store user profile data. Which feature or service should the developer implement to meet these requirements?

  1. Amazon Cognito User PoolsAnswer
  2. B
    Amazon Cognito Identity Pools
  3. C
    Amazon API Gateway Lambda Authorizer
  4. D
    IAM role trust policies configured for the client application

Answer

Amazon Cognito User Pools
Amazon Cognito User Pools act as a user directory that provides sign-up, sign-in, and password recovery out of the box, fulfilling the authentication and profile management requirements.

Step-by-Step Solution

1
Identify the primary requirement, which is to implement user authentication (sign-up, sign-in, password reset) and manage a user directory containing profile data.
The requirement is centered on user authentication and user profile management (identity provider functionality).
This helps distinguish between authentication/directories and authorization/AWS resource access.
2
Evaluate the AWS features that manage user directories and handle standard OIDC/OAuth2 user flows.
Amazon Cognito User Pools serves as a user directory and provides out-of-the-box flows for user registration, authentication, and password recovery.
Choosing Cognito User Pools directly solves the business requirement with minimal custom code.

Key Concept

Amazon Cognito User Pools are designed to manage user directories, authentication, and sign-up/sign-in workflows.
Rate this question

Topics

Application Authentication and Authorization with Amazon Cognito

More questions from this topic