Examkin

Question

Difficulty: EasyApplication Authentication and Authorization with Amazon Cognito

A developer is building a mobile application that requires users to sign in using their email addresses or social identity providers such as Google or Facebook. Once signed in, the application needs to maintain a user directory and manage user profiles. Which Amazon Cognito feature should the developer implement to meet these authentication and directory requirements?

  1. Cognito User PoolsAnswer
  2. B
    Cognito Identity Pools
  3. C
    API Gateway Lambda Authorizer
  4. D
    IAM Trust Policies

Answer

Cognito User Pools
The option identifying Cognito User Pools is correct because User Pools act as a user directory that manages sign-up, sign-in, and user profiles. They support federation with social identity providers like Google and Facebook out of the box.

Step-by-Step Solution

1
Analyze the application requirements.
The application needs user sign-in via email/password and social providers, user directory maintenance, and profile management.
Identifying the target capability (authentication and directory) helps narrow down the AWS services designed for user management.
2
Evaluate Amazon Cognito capabilities.
Cognito User Pools provide user directories, sign-up/sign-in flows, and profile management, whereas Identity Pools provide authorization to AWS resources.
Distinguishing between authentication (User Pools) and authorization (Identity Pools) is key to selecting the correct Cognito component.

Key Concept

Distinction between Cognito User Pools and Identity Pools
Estimated Time:45s
Rate this question

Topics

Application Authentication and Authorization with Amazon Cognito

More questions from this topic