Free AWS Certified Developer Associate DVA-C02 Practice Question

Amazon Cognito allows applications to authenticate users through external identity providers, such as Google, Facebook, or any other OpenID Connect-compatible providers. This service supports identity federation which permits users to sign in through a third-party service, avoiding the need to hold AWS-specific user credentials within the application and streamlining the user authentication process. Other options given either do not provide the functionality to federate with social identity providers or offer different security mechanisms unrelated to user authentication via federated access.