Exam AWS Certified Data Engineer - Associate DEA-C01 topic 1 question 2 discussion

Exam question from Amazon's AWS Certified Data Engineer - Associate DEA-C01

Question #: 2
Topic #: 1

[All AWS Certified Data Engineer - Associate DEA-C01 Questions]

A retail company has a customer data hub in an Amazon S3 bucket. Employees from many countries use the data hub to support company-wide analytics. A governance team must ensure that the company's data analysts can access data only for customers who are within the same country as the analysts.
Which solution will meet these requirements with the LEAST operational effort?

A. Create a separate table for each country's customer data. Provide access to each analyst based on the country that the analyst serves.
B. Register the S3 bucket as a data lake location in AWS Lake Formation. Use the Lake Formation row-level security features to enforce the company's access policies.
C. Move the data to AWS Regions that are close to the countries where the customers are. Provide access to each analyst based on the country that the analyst serves.
D. Load the data into Amazon Redshift. Create a view for each country. Create separate IAM roles for each country to provide access to data from each country. Assign the appropriate roles to the analysts.

Show Suggested Answer

Suggested Answer: B 🗳️

by [deleted] at Jan. 21, 2024, 3:16 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

k350Secops

Highly Voted 1 year, 2 months ago

Selected Answer: B

AWS Lake Formation: It's specifically designed for managing data lakes on AWS, providing capabilities for securing and controlling access to data. Row-Level Security: With Lake Formation, you can define fine-grained access control policies, including row-level security. This means you can enforce policies to restrict access to data based on specific conditions, such as the country associated with each customer. Least Operational Effort: Once the policies are defined within Lake Formation, they can be centrally managed and applied to the data in the S3 bucket without the need for creating separate tables or views for each country, as in options A, C, and D. This reduces operational overhead and complexity.

upvoted 12 times

...

Mike_27

Most Recent 1 month ago

Selected Answer: B

Strongly agree with B

upvoted 1 times

...

dried0extents

4 months ago

Selected Answer: A

I agree that it is A

upvoted 1 times

...

1 year, 5 months ago

Creating DataLake takes at least few days to set up and the solution should be LEAST operational. I think B is not correct.

upvoted 2 times

...

[Removed]

1 year, 5 months ago

Selected Answer: B

https://docs.aws.amazon.com/lake-formation/latest/dg/register-data-lake.html https://docs.aws.amazon.com/lake-formation/latest/dg/registration-role.html

upvoted 3 times

...