Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 105 discussion

option B because by configuring the identity pool to allow unauthenticated users, you can enable guest users to access the sample content. When users create an account, they can be authenticated, and then given access to the full content by assuming a role that allows them access. Option D is correct because creating roles for authenticated and unauthenticated users with different levels of access is an appropriate way to meet the requirement of identifying users who have created an account and keeping track of the number of guest users who eventually create an account.

A) Eliminated - User pools are primarily for managing authenticated users. They do not natively support unauthenticated (guest) users. B) Identity pools support both unauthenticated (guest) and authenticated users C) Eliminated - CloudFront is a content delivery service, not an authentication or identity management service. D) This allows proper segregation of access, where guest users can only access sample content while authenticated users gain full access. E) Eliminated - Proper identity management requires differentiating between roles for guest and authenticated users.

BD is the correct answer.

E won't be a choice because "The company also needs to keep track of the number of guest users who eventually create an account."

Covers Unauthenticated and authenticated users scenario

"who alreaady created account" means User Pool not required. - NOT A