DVA-C02 · Question #740
A developer must build a mobile application that allows users to read and write data from an Amazon DynamoDB table to store user state for each unique user. The solution needs to limit data access…
The correct answer is B. Use Amazon Cognito identity pools to assign unique identifiers and provide user access. Using Amazon Cognito identity pools allows the application to assign unique, authenticated identities to each user. With fine-grained IAM policies, you can grant users access only to their own items in the DynamoDB table. This is the most secure and scalable solution for…
Question
A developer must build a mobile application that allows users to read and write data from an Amazon DynamoDB table to store user state for each unique user. The solution needs to limit data access to allow users access only to their own data. Which solution below is the most secure?
Options
- AEmbed AWS access credentials into the application and create DynamoDB queries that limit user
- BUse Amazon Cognito identity pools to assign unique identifiers and provide user access.
- CModify the DynamoDB table to allow public read and writes, then add client-side filtering.
- DCreate a web portal for users to create an account on AWS Directory Service.
How the community answered
(30 responses)- A10% (3)
- B60% (18)
- C3% (1)
- D27% (8)
Explanation
Using Amazon Cognito identity pools allows the application to assign unique, authenticated identities to each user. With fine-grained IAM policies, you can grant users access only to their own items in the DynamoDB table. This is the most secure and scalable solution for per-user data access in mobile apps.
Community Discussion
No community discussion yet for this question.