A development team is working on an application that will allow customers to view shipment orders placed on their site. The data would be stored in DynamoDB. The application itself would be available on both desktop and mobile based applications. The developers want to use a service which would simplify the authentication process for the application. Which of the following could be used for this purpose?

Answer options:

A.AWS Cognito
B.AWS SAML
C.AWS IAM Access Keys
D. AWS IAM users

Answer – A
The AWS Documentation mentions the following
Amazon Cognito provides authentication, authorization, and user management for your web and mobile apps. Your users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, or Google.
The two main components of Amazon Cognito are user pools and identity pools. User pools are user directories that provide sign-up and sign-in options for your app users. Identity pools enable you to grant your users access to other AWS services. You can use identity pools and user pools separately or together.
Option B is incorrect since this should ideally be used for Federated access
Options C and D are incorrect since this is insecure and would result in a large maintenance overhead
For more information on AWS Cognito, please visit the url
https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html