AWS Certified Developer Associate DVA-C02 Practice Question
A developer is building a mobile app that lets users sign in with Google or Apple accounts. After authentication, the app must download images from a private Amazon S3 bucket and invoke an AWS Lambda function on behalf of the signed-in user. The company wants to grant temporary, least-privilege AWS credentials directly to the mobile client without running any additional backend servers. Which Amazon Cognito feature will satisfy these requirements?
Authorize with ID tokens from the social identity provider.
Identity Pools, also known as Federated Identities in Amazon Cognito, allow you to exchange tokens issued by social, SAML, or OIDC identity providers for temporary AWS credentials. These credentials can be scoped by IAM roles so that the signed-in user can access resources such as S3 objects or invoke Lambda functions. User Pools handle user sign-up and sign-in but do not grant AWS credentials on their own. Running a separate identity broker or relying only on raw ID tokens would not automatically supply AWS credentials or integrate with IAM in the same streamlined way.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between Identity Pools and User Pools in Amazon Cognito?
Open an interactive chat with Bash
How do Identity Pools provide temporary credentials for AWS resources?
Open an interactive chat with Bash
What are Federated Identities, and why are they important?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .