AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 87

Question

A security engineer is working with a product team building a web application on AWS. The application uses Amazon S3 to host the static content, Amazon API Gateway to provide RESTful services, and Amazon DynamoDB as the backend data store. The users already exist in a directory that is exposed through a SAML identity provider. Which combination of the following actions should the engineer take to allow users to be authenticated into the web application and call APIs? (Choose three.)

Accepted Answer

Correct answer: B, C, F. The correct answer is B, C, F. Option B: Configure a SAML identity provider in Amazon Cognito to map attributes to the Amazon Cognito user pool attributes. Option C: Configure the SAML identity provider to add the Amazon Cognito user pool as a relying party. Option F: Update API Gateway to use a COGNITO_USER_POOLS authorizer. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale. Amazon Cognito manages user sign-up, sign-in and federated identity for applications. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Security - Specialty SCS-C02 — Question 87