A developer is building a serverless web application that allows users to sign in and upload files directly to an Amazon S3 bucket. The application must support user registration and sign-in, and provide temporary AWS credentials to authenticated users for S3 uploads. Which two Amazon Cognito features should the developer configure to meet these requirements? (Select TWO.)
- Amazon Cognito User Pools to manage user registration, authentication, and directory servicesAnswer
- Amazon Cognito Identity Pools to authorize users and obtain temporary AWS credentials for S3 accessAnswer
- CAmazon Cognito Identity Pools to store user profiles and host the sign-in web interface
- DAmazon Cognito User Pools to issue temporary AWS IAM credentials directly to the client application
- EA custom AWS Lambda Authorizer linked with Amazon Cognito to generate temporary AWS credentials
Answer
Amazon Cognito User Pools to manage user registration, authentication, and directory services, and Amazon Cognito Identity Pools to authorize users and obtain temporary AWS credentials for S3 access.
To support user sign-up and authentication, a Cognito User Pool is required. To authorize the users and grant temporary AWS credentials for direct S3 upload access, a Cognito Identity Pool is required.
Step-by-Step Solution
Key Concept
Cognito User Pools authenticate users and manage directories, while Cognito Identity Pools authorize users to access AWS resources by issuing temporary credentials.