During the development, definition and deployment of a backend you are building, you have to decide how to use user and identity pools as a part of a serverless application. What statements are correct in this scenario?

Answer options:

A.User pools support temporary, limited-privilege AWS credentials to access other AWS services while Identity pools provide sign-up and sign-in services.
B.User pools help you track user device, location, and IP address while Identity pools help you generate temporary AWS credentials for unauthenticated users.
C.User pools give your users access to AWS resources.
D.User pools are for authorization (access control) which is fully managed on your behalf.

Correct Answer: B
User pools are for authentication (identify verification). Identity pools are for authorization (access control). User pools help you track user device, location, and IP address, and adapt to sign-in requests of different risk levels. Identity pools help you generate temporary AWS credentials for unauthenticated users.
Incorrect Answers:
Options A, C are incorrect because user pools do not deal with AWS credentials to access other AWS services.
Option D is incorrect because Identity pools are for authorization (access control).
References:
https://aws.amazon.com/premiumsupport/knowledge-center/cognito-user-pools-identity-pools/