Examkin

Question

Difficulty: EasyAmazon Cognito Authentication and Authorization

A developer is building a new web application and needs to implement user registration, login, and profile management. The developer wants to store user profile data directly in a managed user directory and support federated sign-in through external identity providers. Which Amazon Cognito feature should the developer use?

  1. Amazon Cognito user poolsAnswer
  2. B
    Amazon Cognito identity pools
  3. C
    Amazon Cognito user pool authorizers
  4. D
    AWS IAM trust policies

Answer

Amazon Cognito user pools
Amazon Cognito user pools act as user directories that provide sign-up and sign-in services for web and mobile applications. They store user profiles and support authentication using external identity providers.

Step-by-Step Solution

1
Analyze the requirements for storing user profiles, managing registration/login, and supporting federated identity providers.
The requirements point to a need for a managed user directory.
Before selecting a service, the specific authentication vs. authorization needs must be identified.
2
Distinguish between the directories component and the credentials federation component of Amazon Cognito.
User Pools manage authentication and directories, while Identity Pools manage authorization and temporary AWS credentials.
This prevents mixing up the two main features of Amazon Cognito.
3
Select the component that natively matches the directory, registration, and login requirements.
Amazon Cognito user pools is the correct selection.
User Pools are specifically designed to act as the identity provider and user directory.

Key Concept

Distinction between Amazon Cognito User Pools and Identity Pools
Estimated Time:45s
Rate this question

Topics

Amazon Cognito Authentication and Authorization

More questions from this topic