Exam AWS Certified Developer Associate topic 1 question 252 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 252
Topic #: 1

[All AWS Certified Developer Associate Questions]

A developer must build a mobile application that allows users to read and write data from an Amazon DynamoDB table to store user state for each unique user. The solution needs to limit data access to allow users access only to their own data.

Which solution below is the most secure?

A. Embed AWS access credentials into the application and create DynamoDB queries that limit user access.
B. Use Amazon Cognito identity pools to assign unique identifiers and provide user access.
C. Modify the DynamoDB table to allow public read and writes, then add client-side filtering.
D. Create a web portal for users to create an account on AWS Directory Service.

Show Suggested Answer

Suggested Answer: B 🗳️

by kapil206001 at Nov. 25, 2022, 1:12 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

rcaliandro

1 year, 11 months ago

Selected Answer: B

Since we need that authenticate users access to an internal AWS Service (DynamoDB) we have to use Amazon Cognito identity pools. So, the B is correct

upvoted 1 times

...

pranay_2406

2 years, 1 month ago

Selected Answer: B

B. Use Amazon Cognito identity pools to assign unique identifiers and provide user access. Amazon Cognito identity pools allow you to authenticate users and provide them with temporary, limited-privilege AWS credentials. By using identity pools, you can assign unique identifiers to each user of your mobile application and control their access to the DynamoDB table. With Amazon Cognito, you can set up fine-grained permissions and policies that restrict user access to their own data in the DynamoDB table. This approach ensures that users can only read and write their own data and are prevented from accessing or modifying data belonging to other users.

upvoted 1 times

...

ezeik

2 years, 3 months ago

Selected Answer: B

B, acccess to AWS service - cognito identity pool

upvoted 1 times

...

DrCloud

2 years, 6 months ago

Selected Answer: B

Ask: "most" secure https://aws.amazon.com/blogs/mobile/building-fine-grained-authorization-using-amazon-cognito-user-pools-groups/ https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-scenarios.html#scenario-basic-user-pool

upvoted 1 times

...