Amazon Cognito is the correct answer as it provides user sign-up, sign-in, and access management for web and mobile applications. It offers an easy way to implement authentication without worrying about the backend infrastructure. IAM is for controlling access to services and resources at a more granular level, KMS is used for managing cryptographic keys, and GuardDuty is a threat detection service, which do not directly offer user management for applications.