Implement authentication and/or authorization for applications and AWS services

Identity federation (Security Assertion Markup Language [SAML], OpenID Connect [OIDC], Amazon Cognito)
Bearer tokens (JSON Web Token [JWT], OAuth, AWS Security Token Service [AWS STS])
The comparison of user pools and identity pools in Amazon Cognito
Resource-based policies, service policies, and principal policies
Role-based access control (RBAC)
Application authorization that uses ACLs
The principle of least privilege
Differences between AWS managed policies and customer-managed policies
Identity and access management