Examkin

Soru

Zorluk: KolayApplication Authentication and Authorization with Amazon Cognito

A developer is creating a web application and needs to provide a secure sign-up, sign-in, and password reset workflow for the application's users. The developer must also maintain a user directory to store user profile data. Which feature or service should the developer implement to meet these requirements?

  1. Amazon Cognito User PoolsCevap
  2. B
    Amazon Cognito Identity Pools
  3. C
    Amazon API Gateway Lambda Authorizer
  4. D
    IAM role trust policies configured for the client application

Cevap

Amazon Cognito User Pools
Amazon Cognito User Pools act as a user directory that provides sign-up, sign-in, and password recovery out of the box, fulfilling the authentication and profile management requirements.

Adım Adım Çözüm

1
Identify the primary requirement, which is to implement user authentication (sign-up, sign-in, password reset) and manage a user directory containing profile data.
The requirement is centered on user authentication and user profile management (identity provider functionality).
This helps distinguish between authentication/directories and authorization/AWS resource access.
2
Evaluate the AWS features that manage user directories and handle standard OIDC/OAuth2 user flows.
Amazon Cognito User Pools serves as a user directory and provides out-of-the-box flows for user registration, authentication, and password recovery.
Choosing Cognito User Pools directly solves the business requirement with minimal custom code.

Anahtar Kavram

Amazon Cognito User Pools are designed to manage user directories, authentication, and sign-up/sign-in workflows.
Bu soruyu puanla

Konular

Application Authentication and Authorization with Amazon Cognito

Bu konudan daha fazla soru