Your development team is developing a mobile application that access resources in AWS. The users accessing this application will be logging in via Facebook and Google. Which of the following AWS mechanisms would you use to authenticate users for the application that needs to access AWS resources

Answer options:

A.Use separate IAM users that correspond to each Facebook and Google user
B.Use separate IAM Roles that correspond to each Facebook and Google user
C.Use Web identity federation to authenticate the users
D.Use AWS Policies to authenticate the users

Answer – C
The AWS documentation mentions the following
You can directly configure individual identity providers to access AWS resources using web identity federation. AWS currently supports authenticating users using web identity federation through several identity providers:
Login with Amazon
Facebook Login
Google Sign-in 
For more information on Web identity federation please visit the below URL:
http://docs.aws.amazon.com/sdk-for-javascript/v2/developer-guide/loading-browser-credentials-federated-id.html