AWS Certified Developer Associate DVA-C02 Practice Question
An online retail platform uses Amazon Cognito user pools to authenticate customers for its single-page web application. The front-end must invoke a serverless REST API that is deployed on Amazon API Gateway with AWS Lambda integrations. To ensure that each API request is processed only when the caller's identity is verified, how should the application convey the client's identity to the backend?
Require a time-based one-time password (TOTP) code with every API request
Assign a unique Amazon Resource Name (ARN) to each client and send the ARN in a custom header
Include the user's JSON Web Token (JWT) as a Bearer value in the HTTP Authorization header for each API request
Rely solely on HTTPS by enabling SSL/TLS for all API Gateway endpoints
After a user signs in with Amazon Cognito, the user receives JSON Web Tokens (JWT) that contain signed claims about the user's identity. The web application should include the JWT as a bearer token in the Authorization header of every HTTP request that it sends to the API. API Gateway (or a Lambda/JWT authorizer) validates the token's signature and claims before the request reaches the backend, confirming that the caller is authenticated. TLS alone provides encryption in transit but typically does not assert client identity, one-time passwords are used only during interactive MFA challenges, and Amazon Resource Names (ARNs) merely identify AWS resources and are not authentication credentials.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a JSON Web Token (JWT) and how does it work?
Open an interactive chat with Bash
How does a JWT differ from session-based authentication?
Open an interactive chat with Bash
Why are SSL/TLS, one-time passwords, and ARNs not suitable for client identity verification in this context?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .