DVA-C02 Question 128
Single answerA company is building a web application where users can sign in using their existing social identity providers (such as Google or Facebook). The application also requires user authentication for accessing specific AWS services. Which solution should the company implement to meet these requirements?
- A
Use Amazon Cognito to enable social identity provider authentication and federate the users into AWS services.
- B
Use AWS IAM to directly integrate with the social identity providers for authentication and authorization.
- C
Use Security Assertion Markup Language (SAML) to connect the social identity providers and AWS services.
- D
Use a custom-built identity provider to bridge the social identity providers and AWS services.
Show answer and explanation
Correct answer: A
Explanation
Amazon Cognito is the best choice for this scenario because it simplifies the integration with social identity providers and federates users to AWS services without requiring custom development. By using Cognito, the application can authenticate users with Google or Facebook and securely manage access to AWS resources via IAM roles.
- A. Correct.
This is the correct option. Amazon Cognito provides built-in support for integrating with social identity providers (such as Google and Facebook) and can federate users to AWS services using IAM roles.
- B. Incorrect.
AWS IAM does not provide direct integration with social identity providers. It is primarily used for managing access to AWS resources for AWS users and roles.
- C. Incorrect.
SAML is used for enterprise identity federation, not for social identity providers like Google and Facebook. This does not address the scenario's requirements.
- D. Incorrect.
Building a custom identity provider is unnecessary and would require significant development effort. Amazon Cognito already provides the required functionality out of the box.