An application developer is tasked with enabling authentication through social media logins for a new mobile app and subsequently permitting access to specific cloud storage and database services on behalf of the authenticated user. Which Amazon Cognito feature should the developer leverage to achieve these requirements?
Directory services with custom application-level federation logic
IAM roles with trust relationships
External identity provider integration with a token broker service
Amazon Cognito Identity Pools
Amazon Cognito User Pools
Synchronization service for user data and preferences