AWS Certified SysOps Administrator – Associate (legacy) — Question 392

Amazon Cognito supports web identity federation through _____.

Answer options

• A. custom sign-in code or own user identities
• B. Facebook, Google, and Amazon
• C. a configuration check for rules that deny access to specific ports
• D. an AWS user group

Correct answer: B

Explanation

Amazon Cognito enables web identity federation by allowing users to authenticate using popular social identity providers such as Facebook, Google, and Amazon, as well as Apple or OpenID Connect (OIDC) providers. This removes the need for developers to write custom backend code to manage user credentials. Options A, C, and D are incorrect because they refer to developer-authenticated identities, network security configurations, and IAM resource management, respectively, rather than standard web identity federation.