A developer is creating a mobile game. The application needs to authenticate users using a custom username and password. Once authenticated, the game client must directly publish player analytics events to an Amazon Pinpoint project. Which of the following Amazon Cognito components should the developer configure to meet these requirements? (Select TWO.)
- An Amazon Cognito User Pool to manage user sign-up, sign-in, and the player directory.Cevap
- An Amazon Cognito Identity Pool to exchange authentication tokens for temporary AWS credentials to access Amazon Pinpoint.Cevap
- CAn Amazon Cognito Identity Pool to serve as the primary user directory and verify player passwords.
- DAn Amazon Cognito User Pool to directly issue temporary AWS IAM credentials to the game client.
- EAn IAM Policy attached directly to the Amazon Cognito User Pool to authorize write permissions to Amazon Pinpoint.
Cevap
The developer should configure an Amazon Cognito User Pool to manage user sign-up, sign-in, and the player directory, and configure an Amazon Cognito Identity Pool to exchange authentication tokens for temporary AWS credentials to access Amazon Pinpoint.
To manage player authentication and the user directory, an Amazon Cognito User Pool is required. To obtain temporary AWS credentials for the game client to access Amazon Pinpoint directly, an Amazon Cognito Identity Pool must be configured to exchange the user pool tokens for temporary IAM credentials.
Adım Adım Çözüm
Anahtar Kavram
Understanding the division of responsibility between Amazon Cognito User Pools (authentication and user directory) and Amazon Cognito Identity Pools (authorization and temporary AWS credentials).