City employees authenticate through a workforce identity provider, while residents use Amazon Cognito user pools for citizen apps. What identity approach should the team keep?
Select an answer to reveal the explanation.
Short Explanation
Staff badges and resident library cards are different doors on purpose. Federate employees through the workforce IdP; give residents Cognito user pools. Stuffing citizens into IAM users or going anonymous breaks the UX and the security model.
Full Explanation
Workforce identities typically federate through corporate IdPs (often with IAM identity federation), whereas citizen applications commonly use Cognito user pools. Mixing those models incorrectly creates poor UX and wrong privilege boundaries. Creating IAM users for residents or relying on anonymous access are incorrect patterns for authenticated municipal apps.