In Amazon Cognito, your mobile app authenticates with the Identity Provider (IdP) using the
provider’s SDK. Once the end user is authenticated with the IdP, the OAuth or OpenID Connect
token returned from the IdP is passed by your app to Amazon Cognito, which returns a new
_________ for the user and a set of temporary, limited-privilege AWS credentials.

A.
Cognito Key Pair

B.
Cognito API

C.
Cognito ID

D.
Cognito SDK

Explanation:
Your mobile app authenticates with the identity provider (IdP) using the provider’s SDK. Once the
end user is authenticated with the IdP, the OAuth or OpenID Connect token returned from the IdP
is passed by your app to Amazon Cognito, which returns a new Cognito ID for the user and a set
of temporary, limited-privilege AWS credentials.
http://aws.amazon.com/cognito/faqs/