Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 792 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 792
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

An analytics company uses Amazon VPC to run its multi-tier services. The company wants to use RESTful APIs to offer a web analytics service to millions of users. Users must be verified by using an authentication service to access the APIs.

Which solution will meet these requirements with the MOST operational efficiency?

A. Configure an Amazon Cognito user pool for user authentication. Implement Amazon API Gateway REST APIs with a Cognito authorizer.
B. Configure an Amazon Cognito identity pool for user authentication. Implement Amazon API Gateway HTTP APIs with a Cognito authorizer.
C. Configure an AWS Lambda function to handle user authentication. Implement Amazon API Gateway REST APIs with a Lambda authorizer.
D. Configure an IAM user to handle user authentication. Implement Amazon API Gateway HTTP APIs with an IAM authorizer.

Show Suggested Answer

Suggested Answer: A 🗳️

by Andy_09 at Feb. 6, 2024, 8:52 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

stephensimudemy

Highly Voted 11 months, 3 weeks ago

Selected Answer: A

User pools is for Authentication and user management

upvoted 7 times

...

sandordini

Highly Voted 9 months, 2 weeks ago

Selected Answer: A

User pools are for authentication. Your app users can sign in through the user pool, Identity pools are for authorization, give them access to other AWS services.

upvoted 6 times

...

zdi561

Most Recent 5 months, 4 weeks ago

Selected Answer: A

When comparing operation efficiency, a Cognito authorizer in AWS API Gateway is generally considered more performant than a Lambda authorizer for basic authentication checks, as Cognito is a managed service optimized for user authentication, while a Lambda authorizer introduces an additional layer of processing with potential cold start overhead, making it better suited for complex, custom authorization logic. But Lambda is more flexible

upvoted 1 times

...