A front-end web application is using Amazon Cognito user pools to handle the user authentication flow. A developer is integrating Amazon DynamoDB into the application using the AWS SDK for JavaScript. How would the developer securely call the API without exposing the access or secret keys?
A) Configure Amazon Cognito identity pools and exchange the JSON Web Token (JWT) for temporary credentials.
B) Run the web application in an Amazon EC2 instance with the instance profile configured.
C) Hardcore the credentials, use Amazon S3 to host the web application, and enable server-side encryption.
D) Use Amazon Cognito user pool JSON Web Tokens (JWITs) to access the DynamoDB APIs.

Question

Quizplus · Accepted Answer

The developer should use Amazon Cognito identity pools to exchange the JWT for temporary AWS credentials, which can then be used to securely call the DynamoDB API without exposing access or secret keys.

A Front-End Web Application Is Using Amazon Cognito User Pools