You are a developer for an application. The application needs to make use of AWS for managing authentication. The users should be able to authenticate using identity providers such as Facebook and Google. At the same time, you also need to enable guest user access to limited resources. How can you achieve this in the best possible way?

Answer options:

A.Use IAM users and groups.
B.Use AWS Cognito and identity pools with both authenticated and unauthenticated identities.
C.Use IAM policy.
D.Use AWS Cognito App Sync.

Answer – B
The AWS Documentation mentions the following.
Amazon Cognito identity pools support both authenticated and unauthenticated identities. Authenticated identities belong to users who are authenticated by any supported identity provider. Unauthenticated identities typically belong to guest users.
Option A is incorrect since this would be too much of a maintenance overhead to maintain the users.
Option C is incorrect since we don’t need an IAM policy access over here.
Option D is incorrect since we don’t need Sync capabilities here.
For more information on Identity pools, please refer to the below URL-
https://docs.aws.amazon.com/cognito/latest/developerguide/identity-pools.html