A team in your company wants to develop a mobile-based application that would use AWS resources. The users should have the ability to log in with existing credentials like Facebook. But there shall be the ability for guest user access as well. Which of the following would be the ideal implementation for this?

Answer options:

A.Create an IAM user with public access.
B.Create an IAM group with public access.
C.Use AWS Cognito with unauthenticated access enabled.
D.Use AWS STS with SAML.

Correct Answer: C
This is also mentioned in the AWS Documentation.
Options A and B are incorrect since it’s not the right approach to using IAM users or groups to access mobile-based applications.
Option D is incorrect since SAML is used for federated access.
For more information on identity pools, please refer to the below URL-
https://docs.aws.amazon.com/cognito/latest/developerguide/identity-pools.html