AWS Certified Developer Associate (#147)

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords. Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?

Amazon Cognito identify pools and AWS STS
Amazon Cognito identity pools and AWS IAM
Amazon Cognito user pools and AWS KMS
Amazon Cognito user pools and identity pools