For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Associate (SAA-C03)AWS SAA-C03 Practice Exam 2Question 20
    Medium1 markMultiple Choice
    Domain 1.2: Secure WorkloadsDomain 1SecurityAPI GatewayCognito

    AWS SAA-C03 · Question 20 · Domain 1.2: Secure Workloads

    A company exposes a REST API using Amazon API Gateway. They want to restrict access to the API so that only authenticated users from their Amazon Cognito User Pool can call it. Which TWO steps are required? (Select TWO.)

    Answer options:

    A.

    Create a Cognito User Pool authorizer in API Gateway.

    B.

    Configure the API methods to use the authorizer.

    C.

    Use AWS WAF to validate the Cognito tokens.

    D.

    Create an IAM role for API Gateway to access Cognito.

    E.

    Enable CORS on the API Gateway.

    How to approach this question

    Identify the API Gateway feature for Cognito integration.

    Full Answer

    To secure API Gateway with Cognito, you create a Cognito User Pool authorizer and then configure your API methods to require that authorizer.

    Common mistakes

    Thinking WAF or IAM roles are required for basic Cognito token validation.
    Question 19All questionsQuestion 21

    Practice the full AWS SAA-C03 Practice Exam 2

    65 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company wants to ensure that no AWS resources can be created in the ap-northeast-1 region acros...EasyQ02A web application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The com...EasyQ03A company is storing highly sensitive data in an Amazon S3 bucket. The security team requires tha...MediumQ04An application running on an EC2 instance needs to access an Amazon DynamoDB table in a different...HardQ05A company needs to store database credentials securely. The credentials must be automatically rot...Medium
    View all 65 questions →