Exam AWS Certified Data Analytics - Specialty All Questions

View all questions & answers for the AWS Certified Data Analytics - Specialty exam

Exam AWS Certified Data Analytics - Specialty topic 1 question 135 discussion

Exam question from Amazon's AWS Certified Data Analytics - Specialty

Question #: 135
Topic #: 1

[All AWS Certified Data Analytics - Specialty Questions]

A company is providing analytics services to its sales and marketing departments. The departments can access the data only through their business intelligence
(BI) tools, which run queries on Amazon Redshift using an Amazon Redshift internal user to connect. Each department is assigned a user in the Amazon Redshift database with the permissions needed for that department. The marketing data analysts must be granted direct access to the advertising table, which is stored in
Apache Parquet format in the marketing S3 bucket of the company data lake. The company data lake is managed by AWS Lake Formation. Finally, access must be limited to the three promotion columns in the table.
Which combination of steps will meet these requirements? (Choose three.)

A. Grant permissions in Amazon Redshift to allow the marketing Amazon Redshift user to access the three promotion columns of the advertising external table.
B. Create an Amazon Redshift Spectrum IAM role with permissions for Lake Formation. Attach it to the Amazon Redshift cluster.
C. Create an Amazon Redshift Spectrum IAM role with permissions for the marketing S3 bucket. Attach it to the Amazon Redshift cluster.
D. Create an external schema in Amazon Redshift by using the Amazon Redshift Spectrum IAM role. Grant usage to the marketing Amazon Redshift user.
E. Grant permissions in Lake Formation to allow the Amazon Redshift Spectrum role to access the three promotion columns of the advertising table.
F. Grant permissions in Lake Formation to allow the marketing IAM group to access the three promotion columns of the advertising table.

Show Suggested Answer

Suggested Answer: BDE 🗳️

by CHRIS12722222 at April 23, 2022, 10:26 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

chp2022

Highly Voted 3 years ago

Selected Answer: BDE

BDE makes the most sense to me

upvoted 6 times

Merrick

2 years, 3 months ago

Lake Formation provides the security and governance of the Data Catalog. Within Lake Formation, you can grant and revoke permissions to the Data Catalog objects, such as databases, tables, columns, and underlying Amazon S3 storage. hence B over C.

upvoted 4 times

liar_p

2 years, 2 months ago

But option B doesn't mention anything about the permission to S3.

upvoted 1 times

MLCL

1 year, 9 months ago

Lake Formation handles the permissions to S3 once the buckets are registered in the datalake.

upvoted 1 times

...

teo2157

Most Recent 1 year, 5 months ago

Selected Answer: CDF

I'll go with C, D, F Create an IAM role with the necessary permissions to access the S3 bucket and assume this role in Amazon Redshift.** This role should have permissions to access the specific S3 bucket where the Parquet files are stored. You can then associate this role with Amazon Redshift, allowing Redshift to access the data in the S3 bucket. Create an external schema in Amazon Redshift pointing to the data lake.** This allows Redshift to access the data in the data lake. You can use the `CREATE EXTERNAL SCHEMA` SQL command in Redshift to do this. Grant the necessary permissions in AWS Lake Formation.** You need to grant the marketing data analysts the necessary permissions to the specific columns in the table. You can do this in the AWS Lake Formation console or using the AWS CLI.

upvoted 1 times

...

pk349

2 years ago

BDE: I passed the test

upvoted 3 times

...

CleverMonkey092

2 years, 1 month ago

I think it is BDE Lake formation will be used to grant access for redshift spectrum to the s3 bucket

upvoted 2 times

...

Arjun777

2 years, 3 months ago

To meet the requirements, the combination of the following steps should be taken: C. Create an Amazon Redshift Spectrum IAM role with permissions for the marketing S3 bucket. Attach it to the Amazon Redshift cluster. D. Create an external schema in Amazon Redshift by using the Amazon Redshift Spectrum IAM role. Grant usage to the marketing Amazon Redshift user. E. Grant permissions in Lake Formation to allow the Amazon Redshift Spectrum role to access the three promotion columns of the advertising table. These steps would grant the necessary permissions for the marketing Amazon Redshift user to access the data stored in the marketing S3 bucket through Amazon Redshift Spectrum, while limiting access to only the three promotion columns of the advertising table. The Amazon Redshift Spectrum IAM role with the necessary permissions for the marketing S3 bucket would be attached to the Amazon Redshift cluster, and then an external schema would be created in Amazon Redshift using that role. Finally, the necessary permissions would be granted in Lake Formation to allow the Amazon Redshift Spectrum role to access the three promotion columns.

upvoted 3 times

...

Gabba

2 years, 3 months ago

Selected Answer: CDE

Role access to S3 buckets are required hence C over B. D & E anyways are correct.

upvoted 2 times

...

CHRIS12722222

3 years, 1 month ago

Agreed BDE

upvoted 2 times

...