exam questions

Exam AWS Certified Data Analytics - Specialty All Questions

View all questions & answers for the AWS Certified Data Analytics - Specialty exam

Exam AWS Certified Data Analytics - Specialty topic 1 question 112 discussion

A company has a marketing department and a finance department. The departments are storing data in Amazon S3 in their own AWS accounts in AWS
Organizations. Both departments use AWS Lake Formation to catalog and secure their data. The departments have some databases and tables that share common names.
The marketing department needs to securely access some tables from the finance department.
Which two steps are required for this process? (Choose two.)

  • A. The finance department grants Lake Formation permissions for the tables to the external account for the marketing department.
  • B. The finance department creates cross-account IAM permissions to the table for the marketing department role.
  • C. The marketing department creates an IAM role that has permissions to the Lake Formation tables.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ryuhei
Highly Voted 2 years, 8 months ago
Selected Answer: AC
Why are there only 3 options? I think the answer is A and C.
upvoted 7 times
...
vkbajoria
Highly Voted 3 years, 3 months ago
Answer is A & B
upvoted 5 times
CHRIS12722222
3 years, 1 month ago
Correct answer is A & C. Read links below https://docs.aws.amazon.com/lake-formation/latest/dg/cross-account-permissions.html https://docs.aws.amazon.com/lake-formation/latest/dg/regranting-locations.html
upvoted 3 times
...
...
theawsguys
Most Recent 1 year, 10 months ago
Option B is not required for this process. Cross-account IAM permissions are not directly used for granting access to Lake Formation tables. Instead, Lake Formation permissions are managed within the Lake Formation service itself, and access to the tables is granted through IAM roles and permissions configured within the respective AWS accounts. To summarize, the finance department grants Lake Formation permissions to the marketing department's account, and the marketing department creates an IAM role with the necessary permissions to access the shared tables. These two steps enable secure access to the required tables between the departments.
upvoted 3 times
...
pk349
2 years ago
AC: I passed the test
upvoted 4 times
...
Dun6
2 years, 9 months ago
I think A and B. Why is the marketing department the one creating the IAM role
upvoted 1 times
...
rocky48
2 years, 9 months ago
Selected Answer: AC
Selected Answer: AC
upvoted 2 times
rocky48
2 years, 9 months ago
There are usually 5 options given in a question.
upvoted 2 times
...
...
f4bi4n
2 years, 12 months ago
Selected Answer: AC
A & C - why was already explained
upvoted 1 times
...
goutes
3 years, 6 months ago
B , C ?
upvoted 2 times
tobsam
3 years, 5 months ago
I disagree. Answer is A & B. https://docs.aws.amazon.com/lake-formation/latest/dg/lake-formation-permissions.html ...Lake Formation uses a combination of Lake Formation permissions and IAM permissions. The IAM permissions model consists of IAM policies.
upvoted 9 times
lakediver
3 years, 4 months ago
Agree A&B For further reading please see https://docs.aws.amazon.com/lake-formation/latest/dg/sharing-catalog-resources.html
upvoted 5 times
sejar
3 years, 3 months ago
By this link, it has to be A & C A: finance department grants Lake Formation permissions for the tables to the external account for the marketing department. [aws link: You can share Data Catalog resources (databases and tables) with external AWS accounts by granting Lake Formation permissions on the resources to the external accounts] C: The marketing department creates an IAM role that has permissions to the Lake Formation tables [aws link: When you share a resource with an AWS organization, you're sharing the resource with all accounts at all levels in that organization. The data lake administrator in each external account must then grant permissions on the shared resources to principals in their account.] A would share the access to lake formation to the marketing account, & the administrator from marketing account creates a role with permission to lake formation table ( role can be assigned to any principal )
upvoted 13 times
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago