A company wants to restrict access to its web application's content using AWS authorization techniques. The company also wants a serverless authorization and authentication solution with low login latency that integrates with the web application and serves content globally. The application currently has a small user base but is expected to grow. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure Amazon Cognito for authentication. Implement Lambda@Edge for authorization. Configure Amazon CloudFront to serve the web application globally..
Why this is the answer
The correct solution leverages Amazon Cognito for serverless authentication, offering low login latency and scalability for a growing user base. Lambda@Edge provides serverless authorization at the edge, integrating with CloudFront to restrict content access globally without impacting origin server performance. Amazon CloudFront delivers the web application globally with low latency. Incorrect options: AWS Directory Service for Microsoft Active Directory is not a serverless authentication solution and is more complex for web application user management. An Application Load Balancer doesn't inherently provide global content delivery like CloudFront. Using AWS Lambda for authorization without Lambda@Edge would require requests to reach a regional Lambda function, increasing latency for global users. Amazon S3 Transfer Acceleration is for faster S3 uploads/downloads, not for serving a dynamic web application globally with authorization. AWS Directory Service for Microsoft Active Directory is not ideal for this use case. AWS Elastic Beanstalk is a platform-as-a-service for deploying web applications, but it doesn't inherently provide global content delivery or edge authorization like CloudFront and Lambda@Edge.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed