Exam AWS Certified Data Analytics - Specialty topic 1 question 164 discussion

Exam question from Amazon's AWS Certified Data Analytics - Specialty

Question #: 164
Topic #: 1

[All AWS Certified Data Analytics - Specialty Questions]

An advertising company has a data lake that is built on Amazon S3. The company uses AWS Glue Data Catalog to maintain the metadata. The data lake is several years old and its overall size has increased exponentially as additional data sources and metadata are stored in the data lake. The data lake administrator wants to implement a mechanism to simplify permissions management between Amazon S3 and the Data Catalog to keep them in sync.
Which solution will simplify permissions management with minimal development effort?

A. Set AWS Identity and Access Management (IAM) permissions for AWS Glue
B. Use AWS Lake Formation permissions
C. Manage AWS Glue and S3 permissions by using bucket policies
D. Use Amazon Cognito user pools

Show Suggested Answer

Suggested Answer: B 🗳️

by AWSRanger at April 26, 2022, 7:15 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

pk349

2 years, 2 months ago

B: I passed the test

upvoted 3 times

...

Merrick

2 years, 4 months ago

B over A - a simpler GRANT/REVOKE permissions model

upvoted 1 times

...

rocky48

2 years, 11 months ago

Selected Answer: B

B is right answer

upvoted 4 times

...

dushmantha

3 years ago

Selected Answer: A

Isn't it meant by saying "Data lake is many year old" that it was not produced by Lake Formation (introduced on 2018). And trick us to select our choice by forgeting this fact?

upvoted 1 times

chdorrego

2 years, 7 months ago

It doesn't matter. You can add the S3 bucket at a later time to Lake Formation.

upvoted 3 times

...

jrheen

3 years, 2 months ago

Answer: B

upvoted 1 times

...

CHRIS12722222

3 years, 2 months ago

Selected Answer: B

You can grant access to your data by using AWS Glue methods or by using AWS Lake Formation grants. The AWS Glue methods use AWS Identity and Access Management (IAM) policies to achieve fine-grained access control. Lake Formation uses a simpler GRANT/REVOKE permissions model similar to the GRANT/REVOKE commands in a relational database system. https://docs.aws.amazon.com/glue/latest/dg/access-control-overview.html

upvoted 3 times

...