A Security Engineer Is Working with a Product Team Building

question 81

Multiple Choice

A Security Engineer is working with a Product team building a web application on AWS. The application uses Amazon S3 to host the static content, Amazon API Gateway to provide RESTful services; and Amazon DynamoDB as the backend data store. The users already exist in a directory that is exposed through a SAML identity provider. Which combination of the following actions should the Engineer take to enable users to be authenticated into the web application and call APIs? (Choose three.)

• A) Create a custom authorization service using AWS Lambda.
• B) Configure a SAML identity provider in Amazon Cognito to map attributes to the Amazon Cognito user pool attributes.
• C) Configure the SAML identity provider to add the Amazon Cognito user pool as a relying party.
• D) Configure an Amazon Cognito identity pool to integrate with social login providers.
• E) Update DynamoDB to store the user email addresses and passwords.
• F) Update API Gateway to use a COGNITO_USER_POOLS authorizer. Update API Gateway to use a COGNITO_USER_POOLS authorizer.

---

Definitions:

Securities And Exchange Commission

A U.S. federal agency that supervises and regulates the securities market to protect investors.

Sarbanes-Oxley Act

A law passed in 2002 aimed at protecting investors from fraudulent accounting activities by corporations.

Public Company Accounting Oversight Board

A nonprofit corporation established by Congress to oversee the audits of public companies in order to protect investors and the public interest by promoting informative, accurate, and independent audit reports.

SEC Oversight

Regulatory oversight exercised by the Securities and Exchange Commission, aiming to protect investors, maintain fair, orderly, and efficient markets, and facilitate capital formation.