AWS Certified Developer - Associate DVA-C02

Amazon Cognito with unauthenticated (guest) identities allows you to assign an IAM role to users without requiring them to log in, providing secure, limited access to AWS resources. This is the most efficient approach for guest users. Authentication providers require login, creating IAM users programmatically is insecure and doesn't scale, and KMS credentials are not designed for this use case.