A Company Developed a Set of APIs That Are Being

question 150

Multiple Choice

A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model. Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?

• A) Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.
• B) Build a OpenID token broker with Amazon and Facebook. Users will authenticate with these identify providers and pass the JSON Web Token to the API to authenticate each API call.
• C) Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.
• D) Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.

---

Definitions:

Yen Purchase

The act of buying yen, Japan's currency, which can involve exchanging another currency for yen in foreign exchange markets.

Exchange Rate

The value of one currency for the purpose of conversion to another, indicating how much of one currency can be exchanged for another currency.

Current Account Deficit

A situation where a country's total imports of goods, services, and transfers exceed its total exports, indicating that it is spending more on foreign trade than it is earning.

Doubled

Increased by 100%, or made twice as large in amount or number.