27. Cognito

Question 1

When should you use Cognito instead of IAM?

Answer 1

When you see any of the following:
“hundreds of users”

“mobile users”

“authenticate with SAML”

Question 2

What should you use to create a serverless database of users for your web and mobile applications?

Answer 2

Cognito User Pools (CUP)

Question 3

CUP can invoke a Lambda function synchronously on what triggers?

Answer 3

1. Authentication events
2. Sign-Up
3. Messages
4. Token Creation

Question 4

What should you use to get identities for “users” so they obtain temporary AWS credentials?

Answer 4

Cognito Identity Pools (Federated Identities)

Question 5

Which Cognito service allows for unauthenticated (guest) access?

Answer 5

Cognito Identity Pools

Question 6

How can Identity Pool users access AWS services?

Answer 6

directly or through API Gateway

Question 7

True or False: Cognito Identity Pool users are mapped to IAM roles and policies

Answer 7

True

Question 8

What should you use to stream data from Cognito into Kinesis?

Answer 8

Cognito Stream

Question 9

What should you use to execute Lambda functions in response to events in Cognito?

Answer 9

Cognito Events

Question 10

How can you silently notify across all devices when identity data changes?

Answer 10

Push Sync

Question 11

What should you use to store preferences, configuration, and the state of your application?

Answer 11

AppSync