AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ18

Identity and Access Management

A company is developing a web application that must authenticate external users across multiple microservices hosted on Amazon Elastic Container Service (Amazon ECS). The solution must use temporary credentials and minimize the administrative overhead of maintaining user databases.

Select and arrange the correct steps from the list to implement a secure authentication strategy that satisfies these requirements. Select each step once or not at all.

Select
Step 1:
Step 2:
Step 3:
Explanation

Amazon Cognito user pools provide the managed external-user directory and issue tokens. An app client connects the web application to that user pool for sign-in and token acquisition. API Gateway Lambda authorizers can validate the bearer token and enforce authorization before forwarding traffic to the microservices. A DynamoDB credential store would create the user-database maintenance the design avoids; IAM Identity Center is not the external web-user authentication service for this flow.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!