A company is developing an application that will be accessed through the Amazon API Gateway REST API. Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically. How can a Developer meet these requirements?
A) Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool.
B) Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer in API Gateway.
C) Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.
D) Create an IAM user for each API user, attach an invoke permissions policy to the API, and use an IAM authorizer in API Gateway.

Question

Quizplus · Accepted Answer

Amazon Cognito user pools provide a user directory and handle user authentication, including token generation and expiration, which can be used with API Gateway to restrict access to registered users.

A Company Is Developing an Application That Will Be Accessed