A mobile application needs to authenticate users using their social media accounts (Google, Facebook). Once authenticated, the application needs to access an Amazon DynamoDB table directly to store user preferences. Which TWO Amazon Cognito components are required? (Select TWO.)

Answer options:

Cognito User Pools

Cognito Identity Pools

Cognito Sync

AWS IAM Identity Center

AWS STS

How to approach this question

Distinguish between authentication (User Pools) and authorization for AWS resources (Identity Pools).

Full Answer

Cognito User Pools, Cognito Identity Pools

Cognito User Pools provide user directories and authentication (including social federation). Cognito Identity Pools (Federated Identities) provide temporary AWS credentials to access AWS services like DynamoDB.

Common mistakes

Thinking User Pools alone can grant access to AWS resources.

Question 09 All questions Question 11

Practice the full AWS SAA-C03 Practice Exam 5

65 questions · hints · full answers · grading

More questions from this exam

Q01A company needs to grant an external auditor read-only access to specific AWS resources. The audi...Easy Q02An application running on EC2 instances needs to access objects in an S3 bucket. The security tea...Medium Q03A company is designing a VPC for a multi-tier web application. They need to block specific malici...Medium Q04A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...Hard Q05A company hosts a web application on an Application Load Balancer (ALB). They are experiencing SQ...Medium

View all 65 questions →