A Developer Is Implementing Authentication and Authorization for an Application

Multiple Choice

A developer is implementing authentication and authorization for an application. The developer needs to ensure that the user credentials are never exposed. Which approach should the developer take to meet this requirement?

A) Store the user credentials in Amazon DynamoDB. Build an AWS Lambda function to validate the credentials and authorize users.
B) Deploy a custom authentication and authorization API on an Amazon EC2 instance. Store the user credentials in Amazon S3 and encrypt the credentials using Amazon S3 server-side encryption.
C) Use Amazon Cognito to configure a user pool, and user the Cognito API to authenticate and authorize the user.
D) Store the user credentials in Amazon RDS. Enable the encryption option for the Amazon RDS DB instances. Build an API using AWS Lambda to validate the credentials and authorize users.