Exam AWS Certified Developer Associate topic 1 question 87 discussion

access to aws services, so B

B) Correct - Amazon Cognito identity pools are designed to provide access to AWS services like Amazon DynamoDB and support authentication from both SAML-based identity providers and social media providers (e.g., Facebook, Google, etc.).

Its identity pool

B!!! The other half of Amazon Cognito is identity pools. Identity pools provide credentials that authorize and monitor API requests to AWS services, for example Amazon DynamoDB or Amazon S3, from your users. You can build identity-based access policies that protect your data based on how you classify the users in your user pool. Identity pools can also accept tokens and SAML 2.0 assertions from a variety of identity providers, independently of user pool authentication.

Its B. Per the Amazon Developer Guide; With Amazon Cognito identity pools, you can create unique identities and assign permissions for users. Your identity pool can include: - Users in an Amazon Cognito user pool With an identity pool, you can obtain temporary AWS credentials with permissions you define to directly access other AWS services or to access resources through Amazon API Gateway - Users who authenticate with external identity providers such as Facebook, Google, Apple, or an OIDC or SAML identity provider. https://docs.aws.amazon.com/cognito/latest/developerguide/getting-started-with-identity-pools.html

Amazon Cognito identity pools give us the possibility to access to AWS services that don't provide an end-point URL (like DynamoDB). It also supports the integration with federated identities with SAML and social media providers. So, the answer is defenitely B.

To meet the requirements of SAML and social media authentication, along with access to AWS services like Amazon DynamoDB with minimal coding, you should use AWS Cognito User Pools. It provides built-in support for SAML and social media authentication, and users can obtain temporary AWS credentials for accessing AWS resources. Cognito User Pools simplifies user management and authentication while integrating seamlessly with AWS services.

definitely C , https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html

You guys are agreeing on wrong answers again, the answer is C. Amazon Cognito user pools provide user sign-up, sign-in, and access control. It also supports SAML-based authentication and provides built-in integrations with social identity providers such as Google, Facebook, and Amazon. Additionally, it provides a user directory to manage user profiles and supports integration with Amazon DynamoDB and other AWS services. B will require additional coding, With Amazon Cognito identity pools, you can federate access to your AWS resources and configure permissions to enable users to access AWS resources.

access to resources = identity pools. https://aws.amazon.com/premiumsupport/knowledge-center/cognito-user-pools-identity-pools/

Amazon Cognito supports authentication with identity providers (IdPs) through Security Assertion Markup Language 2.0 (SAML 2.0). You can use an IdP that supports SAML with Amazon Cognito to provide a simple onboarding flow for your users. Your SAML-supporting IdP specifies the IAM roles that your users can assume. This way, different users can receive different sets of permissions.

Seems like its B according to this resource https://medium.com/swlh/amazon-cognito-what-is-the-difference-between-user-pool-and-identity-pool-ff0c71d79ca7: "If our application needs to access an API Gateway endpoint then, Cognito User Pool is sufficient. If our application needs to talk directly with an AWS service (DynamoDB, S3, …) we need Amazon Cognito Identity Pool too."

B is the answer

Referring to this resource: https://aws.amazon.com/premiumsupport/knowledge-center/cognito-user-pools-identity-pools/#:~:text=With%20a%20user%20pool%2C%20your,access%20to%20other%20AWS%20services. Leaning to identity pools

Cognito with identity pools is the answer because it's cognito without a doubt in this scenario and user pool is more for scenarios with self created pools of user that register on our own site...

it's C, user pools alone can grant resource access https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-scenarios.html#scenario-basic-user-pool "After a successful user pool sign-in, your web or mobile app will receive user pool tokens from Amazon Cognito. You can use those tokens to control access to your server-side resources."

https://medium.com/swlh/amazon-cognito-what-is-the-difference-between-user-pool-and-identity-pool-ff0c71d79ca7