A mobile App developer just made an App in both IOS and Android with a feature to count step numbers. He has used AWS Cognito to authorize users to provide access to the AWS DynamoDB table. The App uses the DynamoDB table to store user subscriber data and many steps. Now the developer also needs Cognito to integrate with Google to provide federated authentication for the mobile application users so that the user does not need to remember extra login access.What should the developer do to authenticate and authorize the users with suitable permissions for the IOS and Android App? (Select TWO.)

Answer options:

A.Amazon Cognito Identity pools (federated identities) support user authorization through federated identity providers—including Amazon, Facebook, Google, and SAML identity providers. The developer just needs to set up the federated identities for Google access.
B.Only Android works for federated identities if Google access is required for AWS Cognito. This can be done by configuring Cognito identity pools with a Google Client ID.C.Amazon Cognito User pools support user authentication through federated identity providers—including Amazon, Facebook, Google, and SAML identity providers. The developer just needs to set up the federated identities for Google access in the Cognito User Pool.
D.Only IOS (Objective-C and Swift) works for federated identities if Google access is required for AWS Cognito. This can be done by configuration Cognito identity pools with a Google Client ID. Google federated access does not work for the android app.

Correct Answer – A and C
 
One common use case for Amazon Cognito is to access AWS Services with an Identity Pool. For the Identity pool itself, it can include:
Users in an Amazon Cognito identity pool.
Users who authenticate with external identity providers such as Facebook, Google, or a SAML-based identity provider.
Users authenticated via your own existing authentication process.
Option A is CORRECT because Identity pool can be used to set up the federated identities through third-party identity providers such as Google.
Option B is incorrect: Because Google federated identities work for both Android and IOS. Refer to https://docs.aws.amazon.com/cognito/latest/developerguide/google.html on the details.
Option C is CORRECT because the User Pool is where the federated identity would be set-up and the Identity Pool is where permissions would be granted. Please also check https://aws.amazon.com/premiumsupport/knowledge-center/cognito-user-pools-identity-pools/ for the differences between User pools and Identify pools. User pools are for authentication (identify verification), while Identity pools are for authorization (access control).
Option D is incorrect: Same reason as Option
B.