You have a paid service providing custom digital art that is hosted on AWS using S3.In order to promote your service, you wish to provide a limited sample of artwork to unauthenticated guest users for free.Which combination of steps will enable guest users to view your free subset of artwork? (Select TWO.)

Answer options:

A.Enable Unauthenticated identities in Amazon Cognito User Pools.
B.Enable Unauthenticated identities in Amazon Cognito Identity Pools.
C.Turn on public access in AWS S3 Bucket Permissions.
D.Assign an IAM Role with appropriate S3 Access permissions.

Answer: B and D
Option A is incorrect because unauthenticated guest access is a feature of Amazon Cognito Identity Pools instead of User Pools.
Option B is CORRECT because Amazon Cognito Identity Pools can be used to enable unauthenticated access to AWS resources.
Option C is incorrect because we do not want to grant public access to AWS S3 Bucket as there is a security issue.
Option D is CORRECT because we need to configure the Unauthenticated Role in Amazon Cognito Identity Pool and map it to an IAM Role.
Reference:
https://docs.aws.amazon.com/cognito/latest/developerguide/identity-pools.html