SCS-C02 · Question #251
A company runs a cuslom online gaming application. The company uses Amazon Cognito for user authentication and authorization. A security engineer wants to use AWS to implement fine-grained…
The correct answer is B. Create a policy store in Amazon Verified Permissions. Configure Cognito as the identity source. Amazon Verified Permissions provides fine-grained authorization by enabling policy-based access control, which can use attributes from Amazon Cognito as input to define access rules. By configuring Cognito as the identity source in Verified Permissions and mapping Cognito…
Question
A company runs a cuslom online gaming application. The company uses Amazon Cognito for user authentication and authorization. A security engineer wants to use AWS to implement fine-grained authorization on resources in the custom application. The security engineer must implement a solution that uses the user attributes that exist in Cognito. The company has already set up a user pool and an identity pool in Cognito. Which solution will meet these requirements?
Options
- ACreate a set of IAM roles and IAM policies Configure the Cognito identity pool to assign users to
- BCreate a policy store in Amazon Verified Permissions. Configure Cognito as the identity source
- CCreate customer managed permissions by using AWS Resource Access Manager (AWS RAM)
- DCreate a set of IAM users and IAM policies. Configure the Cognito user pool to assign users to
How the community answered
(36 responses)- A3% (1)
- B78% (28)
- C14% (5)
- D6% (2)
Explanation
Amazon Verified Permissions provides fine-grained authorization by enabling policy-based access control, which can use attributes from Amazon Cognito as input to define access rules. By configuring Cognito as the identity source in Verified Permissions and mapping Cognito access tokens to Verified Permissions, the security engineer can implement detailed authorization rules based on user attributes in Cognito.
Topics
Community Discussion
No community discussion yet for this question.