Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table. What is the most secure approach for signing requests to the DynamoDB API?
A) Create an IAM user with access credentials that are distributed with the mobile app to sign the requests
B) Distribute the AWS root account access credentials with the mobile app to sign the requests
C) Request temporary security credentials using web identity federation to sign the requests
D) Establish cross account access between the mobile app and the DynamoDB table to sign the requests

Question

Quizplus · Accepted Answer

Using web identity federation allows the app to request temporary security credentials, which is a secure way to sign requests without embedding long-term credentials in the app.

Games-R-Us Is Launching a New Game App for Mobile Devices