AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 1011

Question

A company hosts an application in a private subnet. The company has already integrated the application with Amazon Cognito. The company uses an Amazon Cognito user pool to authenticate users. The company needs to modify the application so the application can securely store user documents in an Amazon S3 bucket. Which combination of steps will securely integrate Amazon S3 with the application? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Create an Amazon Cognito identity pool to generate secure Amazon S3 access tokens for users when they successfully log in. Option C: Create an Amazon S3 VPC endpoint in the same VPC where the company hosts the application. Amazon S3 provides durable, scalable object storage that is fully managed. A VPC endpoint provides private connectivity to AWS services without traversing the public internet. Amazon Cognito manages user sign-up, sign-in and federated identity for applications.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 1011