SAP-C02 Question 369

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Option B is right because: Cognito provides a federated identity provider that can integrate with the directory, making it easy to authenticate users against the application. By configuring the user pool with the metadata from the directory, you can leverage the existing authentication mechanism in the directory. Creating an app client and associating it with the user pool allows you to use Cognito as the authentication provider for the ALB. Specifying the authenticate-cognito action for the listener rule enables Cognito-based authentication for the ALB.

• Chose B2

  Option B focuses more on user identity management for web and mobile applications, providing rich user management features and flexible authentication processes. If the company's main requirement is to manage user identities and data for applications, then option B may be more appropriate. Option D focuses more on providing single sign on access to AWS accounts and applications for organizational employees, as well as integration with external identity providers through SAML. If the company wishes to integrate its existing identity management system (such as Microsoft Active Directory) with AWS accounts and applications, and wants employees to easily access these resources, then option D may be more appropriate.

• Chose B3

  IAM Identity Center is primarily designed for single sign-on (SSO) access to AWS accounts, applications, and services that are integrated with AWS. It provides centralized identity management for users accessing these resources. In contrast, the requirement here is for web application authentication directly tied to an intranet web application hosted on EC2 instances, not for general access to AWS resources.