AWS Certified Solutions Architect – ProfessionalAccelerate Workload Migration and ModernizationEasy
A global e-commerce company is modernizing its customer identity and access management (CIAM) system. The existing system is an on-premises LDAP directory that supports millions of users and high authentication rates, especially during peak sales events. The company wants to migrate this system to AWS, leveraging a fully managed service that can scale to handle extreme loads while maintaining compatibility with their existing applications that rely on LDAP. Which AWS service should the company choose for this migration?
- AAmazon Elastic Cloud Compute (EC2) instances running OpenLDAP
- BAmazon Cognito User Pools
- CAWS Simple AD
- DAWS Directory Service for Microsoft Active Directory (Managed AD)
Show answer & explanationAnswer & explanation
Correct answer: B. Amazon Cognito User Pools
Amazon Cognito User Pools is a fully managed service designed for CIAM, offering scalable user directories that can support millions of users and high authentication rates, making it ideal for e-commerce platforms.
Why the other options are wrong
- A. Running OpenLDAP on EC2 instances would require significant operational overhead for scaling, patching, and high availability, defeating the purpose of a fully managed service.
- C. AWS Simple AD is a basic, low-cost directory service suitable for smaller workloads and is not designed for millions of users.
- D. AWS Managed Microsoft AD is primarily for integrating with Microsoft Active Directory and not optimized for massive-scale consumer identity management.
Amazon Cognito User Pools
A fully managed, scalable user directory service that handles user registration, authentication, and account recovery for web and mobile applications.
- Supports millions of users.
- Integrates with social identity providers (e.g., Google, Facebook).
- Provides secure user directories and authentication.
Memory trick: Cognito handles countless consumers securely.