Your company is planning to develop an application on AWS. This is a web-based application. The application users will use their Facebook or Google identities for authentication. Which of the following is a step you include in your implementation for the web application?

Answer options:

A.Ensure the Security Groups in the VPC only allow requests from the Google and Facebook Authentication servers.
B.Create an OIDC identity provider in AWS.
C.Create a SAML provider in AWS.
D.Create an OIDC provider in both Google and Facebook.

Answer: B
Option A is incorrect because the security groups do not provide capabilities to provide authentication using third-party identity providers such as Google or Facebook.
Option B is CORRECT because you can use an OIDC identity provider when you want to establish trust between an OIDC-compatible IdP—such as Google, Salesforce, and many others—and your AWS account. This is useful if you create a mobile app or web application that requires access to AWS resources, but you don`t want to create custom sign-in code or manage your own user identities.
Option C is incorrect because SAML is used for federated authentication and not identity authentication using Google or Facebook.
Option D is incorrect because you need to use the OIDC identity provider in AWS and not from Google or Facebook.
For more information on ODIC identity providers, kindly refer to the following URL:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc.html