Amazon Exam DVA-C02 Topic 5 Question 24 Discussion

Actual exam question for Amazon's DVA-C02 exam

Question #: 24
Topic #: 5

A developer is designing a serverless application for a game in which users register and log in through a web browser The application makes requests on behalf of users to a set of AWS Lambda functions that run behind an Amazon API Gateway HTTP API

The developer needs to implement a solution to register and log in users on the application's sign-in page. The solution must minimize operational overhead and must minimize ongoing management of user identities.

Which solution will meet these requirements'?

ACreate Amazon Cognito user pools for external social identity providers Configure 1AM roles for the identity pools.

BProgram the sign-in page to create users' 1AM groups with the 1AM roles attached to the groups

CCreate an Amazon RDS for SQL Server DB instance to store the users and manage the permissions to the backend resources in AWS

DConfigure the sign-in page to register and store the users and their passwords in an Amazon DynamoDB table with an attached IAM policy.

Show Suggested Answer

Suggested Answer: A

Amazon Cognito User Pools:A managed user directory service, simplifying user registration and login.

Social Identity Providers:Cognito supports integration with external providers (e.g., Google, Facebook), reducing development effort.

IAM Roles for Authorization:Cognito-managed IAM roles grant fine-grained access to AWS resources (like Lambda functions).

Operational Overhead:Cognito minimizes the need to manage user identities and credentials independently.

Amazon Cognito Documentationhttps://docs.aws.amazon.com/cognito/

Cognito User Pools for Web Applications:https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html

by Deonna at Apr 25, 2024, 12:22 PM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

German

6 months ago

I see where both of you are coming from. But I think option B is a good compromise. Creating users in IAM groups could provide a good balance of simplicity and security.

upvoted 0 times

...

Hui

7 months ago

I disagree, I believe option D is the way to go. Storing users and passwords in DynamoDB with an attached IAM policy seems simpler and easier to manage.

upvoted 0 times

...