Exam AWS Certified Data Analytics - Specialty topic 1 question 108 discussion

https://aws.amazon.com/lake-formation/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc "You can use Lake Formation to centrally define security, governance, and auditing policies in one place, versus doing these tasks per service, and then enforce those policies for your users across their analytics applications. Your policies are consistently implemented, eliminating the need to manually configure them across security services like AWS Identity and Access Management and AWS Key Management Service, storage services like S3, and analytics and machine learning services like Redshift, Athena, and (in beta) EMR for Apache Spark. This reduces the effort in configuring policies across services and provides consistent enforcement and compliance."

I think A is right answer

A: I passed the test

Correct answer is A as AWS Lake Formation helps define security policy-based rules for the users and applications by role centrally and easily with the LEAST operational overhead.

A is the answer. - Multiple BUs, Data Calatlog. - permission handling. - use LKF

the answer is B. least operational overhead means "don't set up anything new". Athena has capability to provide access control via IAM (resource-based, action based) https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonathena.html

A is right answer

As already explained in this topic. The answer should be A. Using Lake Formation it is much easier to assign data access to roles. Glue can also work, but it is harder. Using IAM I don't think you can achieve fine-grained access.

Agree. Answer D is correct

A is the answer for new data lake builder to maintain access to lake.

Why is it A? Not B?

I think B is the correct answer.