Your architect has drawn out the details for a mobile-based application. Below are the key requirements when it comes to authentication.
· Users should have the ability to sign-in using external identities such as Facebook or Google.
· There should be a facility to manage user profiles.
Which of the following would you consider as part of the development process for the application?
 

Answer options:

A.Consider using IAM Roles which can be mapped to the individual users.
B.Consider using User pools in AWS Cognito.
C.Consider building the logic into the application.
D.Consider using SAML federation identities.

Answer – B
The AWS Documentation mentions the following.
User pools provide:
Sign-up and sign-in services.
A built-in, customizable web UI to sign in users.
Social sign-in with Facebook, Google, and log in with Amazon, as well as sign-in with SAML identity providers from your user pool.
User directory management and user profiles.
Security features such as multi-factor authentication (MFA), checks for compromised credentials, account takeover protection, and phone and email verification.
Customized workflows and user migration through AWS Lambda triggers.
Options A and C is incorrect since this would require a lot of effort to develop and maintain.
Option D is incorrect since this is normally used for external directories such as Active Directory.
For more information on user identity pools, please refer to the below Link-
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html