A company deploys a local news website on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The company wants to implement authentication for viewers through well-known social identity providers (IdPs). The company's development team must use AWS native services in the solution.
Which combination of actions will meet these requirements? (Choose two.)

A. Configure Amazon Cognito user pools with social IdPs
B. Configure OpenID Connect (OIDC)-compliant IdP endpoints
C. Create an AWS Lambda authorizer as a target in the ALB target group
D. Configure an ALB listener to add a rule for authentication
E. Use Lambda@Edge to authorize viewer requests in the ALB