Question

Difficulty: EasyApplication Authentication and Authorization with Amazon Cognito

A company is developing a mobile application. The mobile app needs to allow users to sign up and sign in using their email addresses, and it also needs to store custom user profile attributes in a managed user directory. Which Amazon Cognito component should the developer use to implement this user directory and handle user authentication?

  1. A
    Amazon Cognito Identity Pools
  2. Amazon Cognito User PoolsAnswer
  3. C
    AWS IAM Identity Center
  4. D
    Amazon API Gateway Lambda Authorizers

Answer

Amazon Cognito User Pools
Amazon Cognito User Pools is the correct service because it functions as a user directory that manages user registration, authentication, and profile attributes. It provides built-in sign-up and sign-in pages and can scale to millions of users without requiring database management.

Step-by-Step Solution

1
Analyze the application requirements for user registration, login, and managing a user directory.
Identify that the system needs to perform authentication and directory management rather than direct AWS resource authorization.
This helps differentiate between Cognito User Pools and Cognito Identity Pools.
2
Compare Cognito User Pools and Cognito Identity Pools features.
Understand that User Pools handle authentication and act as the user directory, whereas Identity Pools provide temporary AWS credentials for authorization.
To select the specific Cognito component designed for managing user profiles and handling sign-up/sign-in flows.
3
Select the service that manages authentication and user directories.
Choose Amazon Cognito User Pools as the correct service.
It fulfills the requirement to manage user sign-up, sign-in, and profile attributes without managing a backend database.

Key Concept

Distinction between Amazon Cognito User Pools (authentication and user directory) and Amazon Cognito Identity Pools (authorization and temporary AWS credentials).
Rate this question