Question: What does delegated authorization mean?
- It delegates the kind of authorization the user can use with the app, giving them the ability to update it as needed.
- It creates a three-way bond between a user and two different apps, allowing apps to interact with each other and give the user a seamless experience.
- It splits authorization between read and write, so that some users can only read and others can only write.
- It creates a one-way bridge between a user and two different apps, so only the user can interact with both, but the two apps can’t interact with each other.
Explanation
Delegated authorization means a user grants an application permission to access resources on their behalf. In Amazon Ads workflows, this is handled through OAuth 2.0, where an app receives authorized access without requiring the user’s credentials. The app can then use approved permissions to interact with advertiser resources through the Amazon Ads API. This model supports secure connections between systems while keeping user consent and access control central. The permission granted is limited by authorization scope and can be revoked or managed.
Why the other options are incorrect
Authorization type This is incorrect because delegated authorization grants access to an app; it does not let users choose or change authorization methods.
Read/write split This is incorrect because read and write permissions are controlled by scopes, not by the definition of delegated authorization.
One-way bridge This is incorrect because delegated authorization allows authorized app interaction, not only user-only interaction with separate apps.
Source for verification
https://advertising.amazon.com/API/docs/en-us/guides/account-management/authorization/overview
The answer(s) to the question is highlighted in the BOLD text above. You can also find more questions and answers related to the exams on the "Integrating With HubSpot I: Foundations" page.