A developer is building an application that runs behind an Application Load Balancer (ALB). The ALB is configured as the origin for an Amazon CloudFront distribution. Users will log in to the application by using their social media accounts.
How can the developer authenticate users?

A. Validate the users by inspecting the tokens in an AWS Lambda authorizer on the ALB. B. Configure the ALB to use Amazon Cognito as one of the authentication providers. C. Configure CloudFront to use Amazon Cognito as one of the authentication providers. D. Validate the users by calling the Amazon Cognito API in an AWS Lambda authorizer on the ALB.