Examkin

Question

Difficulty: EasyApplication Authentication and Authorization with Amazon Cognito

A developer is building a web application and needs to implement user registration, sign-in, and password recovery features. The developer wants to manage a secure user directory without provisioning or managing server infrastructure. Which Amazon Cognito component should the developer use to meet these requirements?

  1. Amazon Cognito User PoolsAnswer
  2. B
    Amazon Cognito Identity Pools
  3. C
    AWS IAM Trust Policies
  4. D
    Amazon API Gateway Lambda Authorizers

Answer

Amazon Cognito User Pools
Amazon Cognito User Pools act as a user directory and provide built-in sign-up, sign-in, and self-service password recovery workflows, which perfectly align with the developer's requirements.

Step-by-Step Solution

1
Identify the primary requirement of the application, which is to implement user registration, sign-in, password recovery, and to maintain a secure user directory.
The core requirement is user authentication and user directory management.
This determines whether a user directory service (authentication) or a credential vending service (authorization) is needed.
2
Compare Amazon Cognito User Pools and Identity Pools to determine which service meets the user directory requirement.
Amazon Cognito User Pools provide a user directory and handle user registration/sign-in, whereas Identity Pools provide temporary AWS credentials.
Choosing the correct pool type is essential to avoid unnecessary custom integration work.

Key Concept

Amazon Cognito User Pools are user directories that provide sign-up and sign-in options for web and mobile app users.
Rate this question

Topics

Application Authentication and Authorization with Amazon Cognito

More questions from this topic