DVA-C02 Question 135
Select 2You are developing a mobile application where users need to sign in using their email and password. Additionally, your application needs to grant users access to AWS resources like S3 and DynamoDB. Which combination of Cognito features should you use to fulfill both requirements?
- A
Use Amazon Cognito User Pools for user authentication and Amazon Cognito Identity Pools for granting access to AWS resources.
- B
Use Amazon Cognito User Pools for both user authentication and granting access to AWS resources.
- C
Use Amazon Cognito Identity Pools for user authentication and access to AWS resources.
- D
Use Amazon Cognito User Pools for user authentication and configure AWS IAM roles for granting access to AWS resources.
Show answer and explanation
Correct answers: A, D
Explanation
When building applications requiring both user authentication and access to AWS resources, you need to combine the use of Amazon Cognito User Pools and Amazon Cognito Identity Pools. User Pools handle user authentication (like sign-up and sign-in), while Identity Pools grant temporary AWS credentials to users, allowing them to access AWS services. This combination provides a complete solution for the described use case.
- A. Correct.
This is correct. Amazon Cognito User Pools handle user authentication (e.g., sign-up and sign-in), while Amazon Cognito Identity Pools (federated identities) are used to grant temporary AWS credentials to users to access AWS resources.
- B. Incorrect.
This is incorrect. Amazon Cognito User Pools only manage user authentication, not access to AWS resources. You need Identity Pools or another method to grant AWS resource access.
- C. Incorrect.
This is incorrect. Amazon Cognito Identity Pools do not manage user authentication directly. They provide temporary AWS credentials for accessing AWS resources, but authentication is typically handled by User Pools or external identity providers.
- D. Correct.
This is correct. Amazon Cognito User Pools authenticate users, and you can configure AWS IAM roles in Identity Pools to grant users access to AWS resources.