Your team is developing an Android app. You need to use an Amazon Cognito Identity Pool to create unique identities for the app users and federate them with the identity provider from Google. You also want to allow unauthenticated guest access for the application. Guests can get temporary tokens for limited access. How would you implement the guest access using Amazon Cognito?

Answer options:

A.Enable the unauthenticated access in Cognito Identity Pool. Guest users can request an identity ID via the GetId API.
B.Activate the unauthenticated access feature in Cognito User Pool. Link the User Pool in Cognito Identity Pool.
C.Users can get guest credentials via the GetCredentialsForIdentity API with a request type as Guest.
D.Guest users can request temporary tokens by using the GetOpenIdToken API.

Correct Answer – A
About how to use Identity Pool for federated identities in AWS Cognito, please refer to
https://docs.aws.amazon.com/cognito/latest/developerguide/identity-pools.html. The authentication flow can be found in https://docs.aws.amazon.com/en_pv/cognito/latest/developerguide/authentication-flow.html
Option A is CORRECT: Because the unauthenticated access feature can be enabled in Cognito Identity Pool as below:
Option B is incorrect: Because the feature of unauthenticated identities is managed in Cognito Identity Pool instead of User Pool.
Option C is incorrect: Because the GetCredentialsForIdentity API does not have a request type of Guest.
Option D is incorrect: Because the GetOpenIdToken API does not provide the temporary tokens. Users can request a new temporary identity ID via the GetId API.