AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 300

Question

A company uses Amazon Cognito for external user authentication for a web application. External users report that they can no longer log in to the application. What is the FIRST step that a security engineer should take to troubleshoot the problem?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Review any recent changes in Cognito configuration, IAM policies, and role trust policies to identify issues. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. Amazon Cognito manages user sign-up, sign-in and federated identity for applications. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Security - Specialty SCS-C02 — Question 300