An application receives authenticated user data in the form of a JSON Web Token (JWT) from an Amazon Cognito user pool. A developer is setting up an Amazon API Gateway API to handle requests from the application and is using the token to verify the user’s identity. Which of the following must the developer validate before the user data can be trusted?

Topic #: - All AWS Certified Developer Associate Questions

A. The token’s nonce
B. The key ID in the token’s header
C. The token’s signature
D. The token’s issuer claim

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Reference Material:

Suggested Answer:

Reference Material:

Share this post

Join the Discussion