Examkin

Soru

Zorluk: KolayApplication Authentication and Authorization with Amazon Cognito

A developer is building a serverless client application and needs to implement user authentication and allow authenticated users to upload files directly to a private Amazon S3 bucket. Which Amazon Cognito features should the developer use to meet these requirements? (Select TWO.)

  1. Amazon Cognito User Pools to manage the user directory, registration, and authentication.Cevap
  2. Amazon Cognito Identity Pools to authorize users and obtain temporary AWS credentials for accessing the Amazon S3 bucket.Cevap
  3. C
    Amazon Cognito User Pools to directly assume an IAM role and provide temporary credentials to the client.
  4. D
    Amazon Cognito Identity Pools to act as the primary user directory and handle password reset flows.
  5. E
    An Amazon API Gateway Lambda Authorizer to validate tokens and assume IAM roles for direct S3 access.

Cevap

The developer should configure Amazon Cognito User Pools for user directory authentication, and Amazon Cognito Identity Pools to exchange tokens for temporary AWS credentials to access S3.
Amazon Cognito User Pools act as a user directory to manage registration and authentication, while Amazon Cognito Identity Pools authorize users by providing temporary AWS credentials for accessing AWS services like Amazon S3.

Adım Adım Çözüm

1
Configure an Amazon Cognito User Pool.
Creates a secure user directory that handles registration, login, and issues identity and access tokens upon successful authentication.
This establishes user identity and authentication capabilities for the application.
2
Configure an Amazon Cognito Identity Pool and link it to the User Pool.
Enables the application to federate the User Pool tokens to obtain temporary, limited-privilege AWS IAM credentials.
This provides authorization for the client application to interact directly with other AWS services like Amazon S3.

Anahtar Kavram

Amazon Cognito User Pools vs. Amazon Cognito Identity Pools
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Application Authentication and Authorization with Amazon Cognito

Bu konudan daha fazla soru