Cognito vs STS for SAML

In AWS Security Specialty course chapter 3.2 (Quiz) the question is "Which AWS API gets called used when a user accesses AWS using their Active Directory credentials?", correct answer is "STS" but one of the option lists "Cognito" which is also correct, Cognito supports SAML. In the quiz though selecting "Cognito" would mean incorrect answer.