You have designed an application that uses AWS resources, such as S3, to operate and store users’ documents. You currently use Cognito identity pools and user pools. To increase usage and ease of signing up, you decide that adding social identity federation is the best path forward.
How would you differentiate the Cognito identity pool and the federated identity providers (e.g., Google)?

Answer options:

A.They are the same and just called different things.
B.First, you sign-in via Cognito then through a federated site, like Google.
C.Federated identity providers and identity pools are used to authenticate services.
D.You can choose a federated identity provider to authenticate users and associate a Cognito identity pool to authorize the users.

Correct Answer - D
Option D is correct. Federated identity providers are used to authenticate users. Then the Cognito identity pool provides the temporary token that authorizes users to access AWS resources.
Option A is incorrect. Cognito identity pool and the federated identity providers are separate, independent authentication methods.
Option B is incorrect. Only one log-in event is needed, not two.
Option C is incorrect. Identity providers authenticate users, not authenticate services.
For more information, refer to the following URLs:
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation.html
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html
https://aws.amazon.com/articles/web-identity-federation-with-mobile-applications/
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-getting-started.html