An Application Uses Amazon Cognito to Manage End Users' Permissions

question 39

Multiple Choice

An application uses Amazon Cognito to manage end users' permissions when directly accessing AWS resources, including Amazon DynamoDB. A new feature request reads as follows: Provide a mechanism to mark customers as suspended pending investigation or suspended permanently. Customers should still be able to log in when suspended, but should not be able to make changes. The priorities are to reduce complexity and avoid potential for future security issues. Which approach will meet these requirements and priorities?

• A) Create a new database field "suspended_status" and modify the application logic to validate that field when processing requests.
• B) Add suspended customers to second Cognito user pool and update the application login flow to check both user pools.
• C) Use Amazon Cognito Sync to push out a "suspension_status" parameter and split the IAM policy into normal users and suspended users.
• D) Move suspended customers to a second Cognito group and define an appropriate IAM access policy for the group.

---

Definitions:

Freud

Sigmund Freud, an Austrian neurologist and the founder of psychoanalysis, known for his theories of the unconscious mind.

Style Of Life

Style of Life, a concept introduced by Alfred Adler, refers to an individual's unique way of achieving superiority, coping with life's challenges, and striving towards personal goals.

Adler

Alfred Adler, an Austrian medical doctor, psychotherapist, and founder of the school of individual psychology.

Childhood Inferiorities

Feelings of inadequacy believed to begin in childhood, which can influence adult behavior and personality, as per theories in psychology, notably by Alfred Adler.