DVA-C02 · Question #682
A company has a web application in an Amazon ECS cluster running hundreds of secure services in AWS Fargate containers. The services are in target groups routed by an Application Load Balancer…
The correct answer is B. Configure the ALB to use Amazon Cognito. Configuring the Application Load Balancer (ALB) to use Amazon Cognito for authentication allows the ALB to handle user authentication via any OpenID Connect–compatible IdP before forwarding requests to the backend services. This approach requires the least effort since it…
Question
A company has a web application in an Amazon ECS cluster running hundreds of secure services in AWS Fargate containers. The services are in target groups routed by an Application Load Balancer (ALB). Application users log in to the website anonymously, but they must be authenticated using any OpenID Connect protocol-compatible identity provider (IdP) to access the secure services. Which authentication approach would meet these requirements with the LEAST amount of effort?
Options
- AConfigure the services to use Amazon Cognito.
- BConfigure the ALB to use Amazon Cognito.
- CConfigure the services to use AWS STS with the OpenID Connect IdP.
- DConfigure the Amazon ECS cluster to use AWS STS with the Open ID Connect IdP.
How the community answered
(32 responses)- A9% (3)
- B81% (26)
- C6% (2)
- D3% (1)
Explanation
Configuring the Application Load Balancer (ALB) to use Amazon Cognito for authentication allows the ALB to handle user authentication via any OpenID Connect–compatible IdP before forwarding requests to the backend services. This approach requires the least effort since it centralizes authentication at the ALB without changing individual services.
Community Discussion
No community discussion yet for this question.