Examkin

Question

Difficulty: EasyApplication Authentication and Authorization with Amazon Cognito

A developer is implementing a new backend service and needs to add sign-up, sign-in, and profile management capabilities for end users. The developer wants to use a fully managed solution that provides a secure, customizable user directory out of the box. Which Amazon Cognito component should the developer use to meet these requirements?

  1. Amazon Cognito User PoolsAnswer
  2. B
    Amazon Cognito Identity Pools
  3. C
    Amazon API Gateway Lambda Authorizers
  4. D
    AWS Identity and Access Management (IAM) Roles

Answer

Amazon Cognito User Pools
Amazon Cognito User Pools are the correct choice because they act as a user directory that manages sign-up, sign-in, and user profile management, which matches the developer's requirements.

Step-by-Step Solution

1
Identify the primary requirement
The requirement is to implement user sign-up, sign-in, and profile management (a user directory) using Amazon Cognito.
This establishes the scope of authentication vs. authorization.
2
Compare Cognito User Pools and Identity Pools
User Pools provide user directory and authentication, while Identity Pools provide temporary AWS credentials for accessing AWS resources.
To choose the correct component for a user directory, we must distinguish between authentication (User Pools) and authorization (Identity Pools).
3
Select the correct component matching the requirement
Amazon Cognito User Pools is the appropriate component.
It matches the sign-up, sign-in, and user directory requirements directly.

Key Concept

Amazon Cognito User Pools provide user directory services, sign-up, and sign-in functionality for application users.
Estimated Time:45s
Rate this question

Topics

Application Authentication and Authorization with Amazon Cognito

More questions from this topic