Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 172 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 172
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A company runs an online game on AWS. When players sign up for the game, their username and password credentials are stored in an Amazon Aurora database.

The number of users has grown to hundreds of thousands of players. The number of requests for password resets and login assistance has become a burden for the company's customer service team.

The company needs to implement a solution to give players another way to log in to the game. The solution must remove the burden of password resets and login assistance while securely protecting each player's credentials.

Which solution will meet these requirements?

A. When a new player signs up, use an AWS Lambda function to automatically create an IAM access key and a secret access key. Program the Lambda function to store the credentials on the player's device. Create IAM keys for existing players.
B. Migrate the player credentials from the Aurora database to AWS Secrets Manager. When a new player signs up, create a key-value pair in Secrets Manager for the player’s user ID and password.
C. Configure Amazon Cognito user pools to federate access to the game with third-party identity providers (IdPs), such as social IdPs. Migrate the game’s authentication mechanism to Cognito.
D. Instead of using usernames and passwords for authentication, issue API keys to new and existing players. Create an Amazon API Gateway API to give the game client access to the game’s functionality.

Show Suggested Answer

Suggested Answer: C 🗳️

by aescudero51 at June 3, 2024, 8:50 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

HunkyBunky

3 months, 1 week ago

Selected Answer: C

I'm agreed - that only C looks good in this scenario

upvoted 1 times

...

aescudero51

6 months ago

Selected Answer: C

Answer is C This solution addresses the burden of password resets and login assistance by leveraging Amazon Cognito, which provides a scalable and secure authentication mechanism. By federating access to the game with third-party identity providers, players can log in using their existing social media credentials, eliminating the need for password resets and login assistance. This approach also ensures that each player's credentials are securely protected, as Cognito handles the authentication and authorization processes

upvoted 4 times

...