AWS Certified Developer Associate DVA-C02 Practice Question

Identity Pools, also known as Federated Identities in Amazon Cognito, allow developers to create unique identities for their application's users and enable them to assume temporary credentials to access cloud resources directly. This feature would be appropriate for the scenario described as it allows the application to give authenticated users the permissions needed to interact with storage and computing resources. Conversely, User Pools are primarily used for user sign-up and sign-in, and do not directly enable user access to storage and computing resources without an Identity Pool. Directly using ID tokens or an identity broker are methods of authentication, but they do not offer the same federated capabilities combined with resource access that an Identity Pool provides.