Study. uk . com
  1. Home
  2. All questions
  3. Question 40

AWS Certified Solutions Architect study material · question 40 of 500

A mobile app must let users sign in with Google and then read from a private S3 bucket. Which Cognito components does this need?

  1. A user pool for sign-in and an identity pool for AWS credentials
  2. A user pool alone, which issues AWS credentials directly
  3. An identity pool alone, which authenticates the user itself
  4. Two user pools, one per identity provider
Show the answer

Answer: A. A user pool for sign-in and an identity pool for AWS credentials

The user pool authenticates and returns OAuth 2.0 tokens; the identity pool exchanges one for the temporary AWS credentials that reach S3.

Source: What is Amazon Cognito? (Amazon Web Services) — A user pool and identity pool used together

Challenge yourself on this topic → Study as cards