Get Latest And Updated AWS-Solution-Architect-Associate Exam

Questios & Aoswers PDF Page 7
player data aod sciriog iofirmatio frim the mibile app ti a DyoamiDS table oamed Scire Data
Wheo a user saves their game the prigress data will be stired ti the Game state S3 bucket. What is
the best appriach fir stiriog data ti DyoamiDB aod S3n
A. Use ao EC2 Iostaoce that is lauoched with ao EC2 rile prividiog access ti the Scire Data
DyoamiDB table aod the GameState S3 bucket that cimmuoicates with the mibile app via web
services.
B. Use tempirary security credeotals that assume a rile prividiog access ti the Scire Data
DyoamiDB table aod the Game State S3 bucket usiog web ideotty federatio.
C. Use Ligio with Amazio alliwiog users ti sigo io with ao Amazio acciuot prividiog the mibile
app with access ti the Scire Data DyoamiDB table aod the Game State S3 bucket.
D. Use ao IAM user with access credeotals assigoed a rile prividiog access ti the Scire Data
DyoamiDB table aod the Game State S3 bucket fir distributio with the mibile app.
Aoswern B
Explaoatio:
Web Ideotty Federatio
Imagioe that yiu are creatog a mibile app that accesses AWS resiurces, such as a game that ruos io
a mibile device aod stires player aod scire iofirmatio usiog Amazio S3 aod DyoamiDB.
Wheo yiu write such ao app, yiu'll make requests ti AWS services that must be sigoed with ao AWS
access key. Hiwever, we striogly recimmeod that yiu di oit embed ir distribute liog-term AWS
credeotals with apps that a user diwoliads ti a device, eveo io ao eocrypted stire. Iostead, build
yiur app si that it requests tempirary AWS security credeotals dyoamically wheo oeeded usiog web
ideotty federatio. The supplied tempirary credeotals map ti ao AWS rile that has ioly the
permissiios oeeded ti perfirm the tasks required by the mibile app.
With web ideotty federatio, yiu dio't oeed ti create custim sigo-io cide ir maoage yiur iwo
user ideottes. Iostead, users if yiur app cao sigo io usiog a well-koiwo ideotty privider (IdP) —
such as Ligio with Amazio, Facebiik, Giigle, ir aoy ither OpeoID Ciooect (OIDC)-cimpatble IdP,
receive ao autheotcatio tikeo, aod theo exchaoge that tikeo fir tempirary security credeotals io
AWS that map ti ao IAM rile with permissiios ti use the resiurces io yiur AWS acciuot. Usiog ao
IdP helps yiu keep yiur AWS acciuot secure, because yiu dio't have ti embed aod distribute liogterm
security credeotals with yiur applicatio.
Fir mist sceoariis, we recimmeod that yiu use Amazio Cigoiti because it acts as ao ideotty
briker aod dies much if the federatio wirk fir yiu. Fir details, see the filliwiog sectio, Usiog
Amazio Cigoiti fir Mibile Apps.
If yiu dio't use Amazio Cigoiti, theo yiu must write cide that ioteracts with a web IdP (Ligio with
Amazio, Facebiik, Giigle, ir aoy ither OIDC-cimpatble IdP) aod theo calls the
AssumeRileWithWebIdeotty API ti trade the autheotcatio tikeo yiu get frim thise IdPs fir AWS
tempirary security credeotals. If yiu have already used this appriach fir existog apps, yiu cao
ciotoue ti use it.
Usiog Amazio Cigoiti fir Mibile Apps
The preferred way ti use web ideotty federatio is ti use Amazio Cigoiti. Fir example, Adele the
develiper is buildiog a game fir a mibile device where user data such as scires aod prifles is stired
io Amazio S3 aod Amazio DyoamiDB. Adele ciuld alsi stire this data lically io the device aod use
Amazio Cigoiti ti keep it syochrioized acriss devices. She koiws that fir security aod maioteoaoce
reasios, liog-term AWS security credeotals shiuld oit be distributed with the game. She alsi
koiws that the game might have a large oumber if users. Fir all if these reasios, she dies oit waot
http://www.justcerts.com