AWS SAA-C03 · Question 15 · Domain 1.1: Secure Access
An application uses Amazon API Gateway and AWS Lambda. The API is public, but the company wants to restrict access so that only users who have authenticated via a third-party OpenID Connect (OIDC) identity provider can call the API. <br/><br/>What is the MOST appropriate way to secure the API?
Answer options:
Use an Amazon Cognito User Pool as an authorizer for the API Gateway.
Configure API Gateway to use AWS IAM authorization and create IAM users for each client.
Implement the OIDC validation logic inside the backend Lambda function.
Use AWS WAF to validate the OIDC tokens in the HTTP headers.
65 questions · hints · full answers · grading
Expert