You are the senior developer in a company that builds and sells analytics dashboards for organizations in a B2B model. After implementing the architecture designed by the solutions architect which integrates Amazon Cognito and Amazon Elasticsearch Service, you notice that you are able to log in but you cannot see the Kibana dashboard getting an Elasticsearch es:ESHttpGet authorization error. What could be the possible reason?

Answer options:

A.The authenticated IAM role for identity pools doesn`t include the privileges required to access Kibana.
B.Amazon Cognito authentication is required. The user identity has changed with respect to the access policy variables for unauthenticated identities.
C.Authenticated identities belong to users who are authenticated by any supported identity provider. Unauthenticated identities typically belong to guest users.
D.For each identity type, there is an assigned role. This role has a policy attached to it which dictates which AWS services that role can access.

Correct Answer: A
By default, the authenticated IAM role for identity pools doesn`t include the privileges required to access Kibana. You have to add the name of the authenticated role to the Amazon ES access policy.
Option B is incorrect because Amazon Cognito authentication is not required. You have to be careful when including your users` identity IDs in your access policies, particularly for unauthenticated identities, as these may change if the user chooses to log in.
Options C, D are incorrect because although the statements are true, they do not apply to this scenario.
References:
https://amzn.to/3gi6yGA
https://go.aws/3d5IJ2B