Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam

Exam AWS Certified Developer Associate topic 1 question 64 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 64
Topic #: 1

[All AWS Certified Developer Associate Questions]

A developer is designing a full-stack serverless application. Files for the website are stored in an Amazon S3 bucket. AWS Lambda functions that use Amazon
API Gateway endpoints return results from an Amazon DynamoDB table.
The developer must create a solution that securely provides registration and authentication for the application while minimizing the amount of configuration.
Which solution meets these requirements?

A. Create an Amazon Cognito user pool and an app client. Configure the app client to use the user pool and provide the hosted web UI provided for sign-up and sign-in.
B. Configure an Amazon Cognito identity pool. Map the users with IAM roles that are configured to access the S3 bucket that stores the website.
C. Configure and launch an Amazon EC2 instance to set up an identity provider with an Amazon Cognito user pool. Configure the user pool to provide the hosted web UI for sign-up and sign-in.
D. Create an IAM policy that allows access to the website that is stored in the S3 bucket. Attach the policy to an IAM group. Add IAM users to the group.

Show Suggested Answer

Suggested Answer: A 🗳️

by JAMG54 at Sept. 1, 2022, 3:32 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

JAMG54

Highly Voted 2 years, 11 months ago

For me its A. Option B) Identity pool are used to request permissions to access aws resources not for login. Option C) I am using S3 with a serverless application and also only 1 EC2 instance is not enough to serve multiple users. D)IAM permissions are more for internal aws accoun users not end users

upvoted 12 times

...

sumanshu

Most Recent 8 months ago

Selected Answer: A

A) Correct - Amazon Cognito is specifically designed for authentication and user management in serverless applications. It provides built-in features for user registration, sign-in, and sign-out,

upvoted 1 times

sumanshu

8 months ago

C) Eliminated - This approach introduces unnecessary complexity and cost

upvoted 1 times

sumanshu

8 months ago

D) Eliminated - IAM users are intended for managing access for AWS resources, not for individual users of an application.

upvoted 1 times

...

sara_exam_topics

1 year, 10 months ago

Selected Answer: A

A. Create an Amazon Cognito user pool and an app client. Configure the app client to use the user pool and provide the hosted web UI provided for sign-up and sign-in. Here's why this is the most suitable option: Amazon Cognito is a fully managed identity provider service that offers authentication and authorization capabilities. It is designed to handle user registration and authentication with ease. Creating an Amazon Cognito user pool allows you to securely manage user registration, sign-up, and sign-in processes for your application. It provides features like multi-factor authentication, password policies, and user attribute customization.

upvoted 2 times

...

rcaliandro

2 years, 1 month ago

Can someone explain me why we don't use Amazon Cognito Identity pools? The application, a part from the authentication process, needs to access AWS resources like API Gateway and the Web site on S3. Since we are using these services, shouldn't we use Identity pools?

upvoted 1 times

rcaliandro

2 years, 1 month ago

Maybe I understood why, but I would like that someone explain me why A is correct. In my opinion, it is true that the application will use AWS services like S3 but it is also true that a static website in S3, since it is public, doesn't need particular IAM users, roles or something like that but it provide a public endpoint that can be called as redirect url as soon as a user logs to amazon congito user pool service.

upvoted 1 times

...

Jazz888

1 year, 7 months ago

From my understanding, you are not giving the users/clients direct access to AWS resources. In this scenario the clients are accessing through an entry-point API Gateway.

upvoted 1 times

...

MrTee

2 years, 3 months ago

Selected Answer: A

Option A is the best option because it provides a solution that is easy to configure and implement while providing secure registration and authentication for the application.

upvoted 1 times

...

pancman

2 years, 5 months ago

Saw this question in the exam today (Feb 2023)

upvoted 3 times

...

pancman

2 years, 5 months ago

Selected Answer: A

The answer is A - cognito user pools. For those who are saying B (cognito identity pools), please read about the difference between the two of these services. User pools provide sign-up and login kind of functionality, whereas identity pools are for authentication to AWS services and they give the client a temporary IAM access.

upvoted 3 times

...

MMaquis

2 years, 6 months ago

Selected Answer: A

My answer is A. Everything related to S3 and DynDb is already done, the question is tricky. The only requirement is signup and authentication, which is a Cognito User Pool side.

upvoted 1 times

...

sichilam

2 years, 7 months ago

Keywords "provides registration and authentication" not authorization. So A it is

upvoted 1 times

...

braveheart22

2 years, 7 months ago

I'm inclined toward option B

upvoted 1 times

tieyua

2 years, 7 months ago

Keywords "provides registration and authentication"

upvoted 1 times

...

sylvergorilla

2 years, 8 months ago

Selected Answer: B

B meets both requirements. I would say https://docs.aws.amazon.com/cognito/latest/developerguide/iam-roles.html

upvoted 1 times

...

gpit

2 years, 8 months ago

Selected Answer: B

B meets both requirements: "securely provides registration and authentication for the application" "minimizing the amount of configuration".

upvoted 1 times

...

dark_cherrymon

2 years, 9 months ago

Selected Answer: A

i choose A, but none of the answers mentions accessing dynamo db. i'm assuming lambda is accessing dynamo db

upvoted 1 times

...

cloud_collector

2 years, 10 months ago

Selected Answer: A

Amazon Cognito User Pools are used for authentication. Identity Pools are used for User Authorization.

upvoted 3 times

...

habros

2 years, 10 months ago

A. Twist of words when author describes application architecture within the question. For this qn it’s should be in the perspective of client instead of software engineer.

upvoted 1 times

...

warriorYup

2 years, 10 months ago

Selected Answer: A

The question clearly states it needs registration and authentication. Plus the answer B is wrong as it states mapping the IAM users with Identity roles

upvoted 2 times

...

BAxi

2 years, 11 months ago

Selected Answer: B

It should be B as we are talking about giving access to S3 and dynamoDB from it.

upvoted 1 times

LaXuanLinh

2 years, 11 months ago

Nope, it's A. Lambda functions don't need Cognito identity pools to access DynamoDB or S3, it just needs IAM role. The client will access data via the Lambda functions, thus B is wrong. Cognito user pools provide authentication and authorization so it's A.

upvoted 7 times

...

Load full discussion...