Q30 — AWS SAA-C03 Ch.12

Question 30 of 100 | ← Chapter 12

Q830. An analytics company uses Amazon VPC to run its multi-tier services. The company wants to use RESTful APIs to offer a web analytics service to millions of users. Users must be verified by using an authentication service to access the APIs.Which solution will meet these requirements with the MOST operational efficiency?

Correct Answer: A. Configure an Amazon Cognito user pool for user authentication. Implement Amazon API Gateway REST APIs with a Cognito authorizer.

Explanation

A OR B.To offer a web analytics service with RESTful APIs and user authentication, you can follow these steps:Step 1: Configure an Amazon Cognito user pool for user authentication (Option A)Amazon Cognito provides user authentication and authorization services. By configuring a user pool, you can manage user identities, handle user sign-up and sign-in, and generate user tokens for authentication.Step 2: Implement Amazon API Gateway REST APIs with a Cognito authorizer (Option A)Amazon API Gateway is a fully managed service that allows you to create, deploy, and manage APIs. By implementing RESTful APIs with a Cognito authorizer, you can enforce user authentication and authorization for your web analytics service. The Cognito authorizer integrates with the user pool created in Step 1 to verify user access to the APIs.Option B suggests configuring an Amazon Cognito identity pool for user authentication and implementing Amazon API Gateway HTTP APIs with a Cognito authorizer. Identity pools are typically used for federated identity management and providing temporary AWS credentials, rather than user authentication for API access. Therefore, option B is not the most operationally efficient solution for this scenario.Option C suggests configuring an AWS Lambda function to handle user authentication and implementing Amazon API Gateway REST APIs with a Lambda authorizer. While Lambda functions can be used for custom authentication logic, they introduce additional complexity and may not be the most operationally efficient solution in this scenario.Option D suggests configuring an IAM user to handle user authentication and implementing Amazon API Gateway HTTP APIs with an IAM authorizer. IAM users are typically used for AWS account management and access control, rather than user authentication for API access. Using IAM for user authentication can be complex and less suitable for this scenario.Therefore, option A is the most appropriate solution as it leverages Amazon Cognito user pools for user authentication and Amazon API Gateway REST APIs with a Cognito authorizer, providing a streamlined and operationally efficient approach to offer a web analytics service with RESTful APIs and user verification.