SAA-C03 · Question #119
A company wants to restrict access to the content of its web application. The company needs to protect the content by using authorization techniques that are available on AWS. The company also wants t
The correct answer is A. Configure Amazon Cognito for authentication. Implement Lambda@Edge for authorization.. Amazon Cognitoprovides scalable, serverless authentication, andLambda@Edgeis used for authorization, providing low-latency access control at the edge.Amazon CloudFrontserves the web application globally with reduced latency and ensures secure access for users around the world. Th
Question
A company wants to restrict access to the content of its web application. The company needs to protect the content by using authorization techniques that are available on AWS. The company also wants to implement a serverless architecture for authorization and authentication that has low login latency. The solution must integrate with the web application and serve web content globally. The application currently has a small user base, but the company expects the application's user base to increase. Which solution will meet these requirements?
Options
- AConfigure Amazon Cognito for authentication. Implement Lambda@Edge for authorization.
- BConfigure AWS Directory Service for Microsoft Active Directory for authentication. Implement
- CConfigure Amazon Cognito for authentication. Implement AWS Lambda for authorization Use
- DConfigure AWS Directory Service for Microsoft Active Directory for authentication. Implement
How the community answered
(57 responses)- A44% (25)
- B9% (5)
- C30% (17)
- D18% (10)
Explanation
Amazon Cognitoprovides scalable, serverless authentication, andLambda@Edgeis used for authorization, providing low-latency access control at the edge.Amazon CloudFrontserves the web application globally with reduced latency and ensures secure access for users around the world. This solution minimizes operational overhead while providing scalability and security. Option B (Directory Service): Directory Service is more suitable for enterprise use cases involving Active Directory, not for web-based applications. Option C (S3 Transfer Acceleration): S3 Transfer Acceleration helps with file transfers but does not provide authorization features. Option D (Elastic Beanstalk): Elastic Beanstalk adds unnecessary overhead when CloudFront can handle global delivery efficiently.
Community Discussion
No community discussion yet for this question.