A developer is tasked with enabling a mobile application to authenticate users via third-party social media platforms and subsequently authorize them to directly call cloud services. Which Amazon service should be utilized to fulfill this requirement?
Incorporate Amazon QuickSight for identity management and authorization of cloud service API calls.
Leverage the Security Token Service to build federated user sessions with external platforms.
Implement an Amazon Cognito Identity Pool to federate with external identity providers and acquire temporary credentials for service access.
Deploy an Amazon Cognito User Pool to directly manage external authentication and access.