Exam AWS Certified Developer Associate topic 1 question 17 discussion

Use Amazon Cognito is the best Solution. I vote for c

A) Eliminated - HTTP basic authentication is inherently insecure if not used over HTTPS. B) Eliminated: using HTTP instead of HTTPS would expose user credentials during transmission. C) Correct - Amazon Cognito provides a fully managed, secure solution for user authentication and authorization D) Eliminated: IAM users and groups are intended for managing permissions for AWS resources, not for end-user authentication in applications.

I excluded A and B because HTTP is not HTTPS, and D because end users are not IAM users.

for sure C

for sure C

Of course C. Amazon Cognito User Pools for authentication Amazon Cognito Identity Pools for authorization

Saw this question in the exam today (Feb 2023)

C is the best solution.

Voting for C

pretty straight forward, use cognito.

C, just vote C

To assure in-transit encryption you can't use HTTP. I vote for C

End User side authentication - Cognito SSO and IAM are for managing AWS resources. And, doesn’t make sense storing credentials in in-memory storages…