A developer is implementing a mobile photo-sharing application. The application uses a DynamoDB table to store user profile data. The developer wishes to use web identity federation to allow users to authenticate using social networks like Facebook and Google. What service can the developer use to authorize the application users and grant them access to the DynamoDB table?

Answer options:

A.AWS IAM
B.AWS STS
C.AWS Directory Service
D.AWS Resource Access Manager

Answer: B
Option A is incorrect because AWS IAM is used to create and manage AWS users and groups.
Option B is CORRECT because AWS Security Token Service can be used to provide temporary security credentials to applications using web identity federation. The application can then use these credentials to access the AWS DynamoDB table on behalf of the application users.
Option C is incorrect because AWS Directory Service is a managed service offering Microsoft Active Directory capabilities to applications deployed on AWS.
Option D is incorrect because AWS Resource Access Manager manages to share AWS resources among multiple AWS accounts and organizations.
Reference:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WIF.html