Questions
- Why would an organization choose to federate their managed identities into an Amazon Cognito user pool for application identity?
a. Allows the app team to use native AWS services for identity.
b. Allows the organization to continue to enforce their compliance controls centrally, even though applications may not look directly to their identity systems for user information.
c. They shouldn't; they should only connect apps directly to their organization's official IdP.
d. A and B.
- Why would we apply a trust policy that validates a principal was authenticated by the identity pool that is requesting temporary credentials for an Amazon Cognito user?
Otherwise, non-authenticated users could be granted access to AWS resources within the account.
