A gaming company is developing a new mobile game and decides to store the data for each user in Amazon DynamoDB. To make the registration process as easy as possible, users can log in with their existing Facebook or Amazon accounts. The company expects more than 10,000 users. How should a database specialist implement access control with the LEAST operational effort?
A) Use web identity federation on the mobile app and AWS STS with an attached IAM role to get temporary credentials to access DynamoDB.
B) Use web identity federation on the mobile app and create individual IAM users with credentials to access DynamoDB.
C) Use a self-developed user management system on the mobile app that lets users access the data from DynamoDB through an API.
D) Use a single IAM user on the mobile app to access DynamoDB.

Question

Quizplus · Accepted Answer

Using web identity federation with AWS STS and an attached IAM role allows the app to obtain temporary credentials for accessing DynamoDB, minimizing operational effort by leveraging existing identity providers like Facebook or Amazon.

A Gaming Company Is Developing a New Mobile Game and Decides