A company’s developer is creating an application that uses Amazon API Gateway. The company wants to ensure that only users in the Sales department can use the application. The users authenticate to the application by using federated credentials from a third-party identity provider (IdP) through Amazon Cognito. The developer has set up an attribute mapping to map an attribute that is named Department and to pass the attribute to a custom AWS Lambda authorizer.
To test the access limitation, the developer sets their department to Engineering in the IdP and attempts to log in to the application. The developer is denied access. The developer then updates their department to Sales in the IdP and attempts to log in. Again, the developer is denied access. The developer checks the logs and discovers that access is being denied because the developer’s access token has a department value of Engineering.
Which of the following is a possible reason that the developer’s department is still being reported as Engineering instead of Sales?
tapan666
Highly Voted 1 year, 6 months agoalbert_kuo
Most Recent 5 months, 2 weeks ago65703c1
11 months, 2 weeks agoethanluvsbooks
1 year, 1 month agoKarBiswa
1 year, 2 months agojoshnort
1 year, 3 months agoSerialiDr
1 year, 3 months agoSerialiDr
1 year, 3 months agoSerialiDr
1 year, 3 months agotqiu654
1 year, 4 months agoanasbakla
1 year, 5 months agoPrakashM14
1 year, 6 months agoClaire_KMT
1 year, 6 months ago