DVA-C02 Question 125
Single answerA company is building a web application that allows users to log in using their existing social media accounts (such as Google or Facebook). The company wants to use AWS services to handle user authentication and authorization securely. Which AWS service should the company use to implement this functionality?
- A
Amazon Cognito
- B
AWS Identity and Access Management (IAM)
- C
AWS Directory Service
- D
AWS Single Sign-On (AWS SSO)
Show answer and explanation
Correct answer: A
Explanation
Amazon Cognito is specifically designed to handle user authentication and works seamlessly with social identity providers such as Google and Facebook using OpenID Connect (OIDC). This makes it the most appropriate service for the use case in the question. Other services, such as IAM, Directory Service, and AWS SSO, are not designed for this purpose.
- A. Correct.
Amazon Cognito is the correct choice for enabling user authentication using social identity providers such as Google or Facebook. It supports OpenID Connect (OIDC) and provides features for user sign-up, sign-in, and access control.
- B. Incorrect.
AWS Identity and Access Management (IAM) is primarily used for securing AWS resources and managing permissions for AWS accounts. It is not designed for user authentication with social identity providers.
- C. Incorrect.
AWS Directory Service is used to integrate AWS resources with existing on-premises Microsoft Active Directory or to create a new, standalone directory. It is not relevant for social media-based authentication.
- D. Incorrect.
AWS Single Sign-On (AWS SSO) is used for centralizing access to multiple AWS accounts and business applications, but it does not facilitate authentication with social identity providers like Google or Facebook.