Amazon Exam DAS-C01 Topic 7 Question 87 Discussion

Actual exam question for Amazon's DAS-C01 exam

Question #: 87
Topic #: 7

A company wants to use a data lake that is hosted on Amazon S3 to provide analytics services for historical dat

a. The data lake consists of 800 tables but is expected to grow to thousands of tables. More than 50 departments use the tables, and each department has hundreds of users. Different departments need access to specific tables and columns.

Which solution will meet these requirements with the LEAST operational overhead?

ACreate an 1AM role for each department. Use AWS Lake Formation based access control to grant each 1AM role access to specific tables and columns. Use Amazon Athena to analyze the data.

BCreate an Amazon Redshift cluster for each department. Use AWS Glue to ingest into the Redshift cluster only the tables and columns that are relevant to that department. Create Redshift database users. Grant the users access to the relevant department's Redshift cluster. Use Amazon Redshift to analyze the data.

CCreate an 1AM role for each department. Use AWS Lake Formation tag-based access control to grant each 1AM role
access to only the relevant resources. Create LF-tags that are attached to tables and columns. Use Amazon Athena to analyze the data.

DCreate an Amazon EMR cluster for each department. Configure an 1AM service role for each EMR cluster to access

Erelevant S3 files. For each department's users, create an 1AM role that provides access to the relevant EMR cluster. Use Amazon EMR to analyze the data.

Show Suggested Answer

Suggested Answer: C

by Britt at Mar 09, 2024, 05:57 AM

Limited Time Offer

25%

Off

Get Premium DAS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Laurena

7 days ago

Option B sounds like a lot of work, though. Setting up and managing multiple Redshift clusters? No thanks. I think the simplicity of option C, with Lake Formation, is the way to go. Plus, Athena is a great tool for ad-hoc analytics.

upvoted 0 times

...

Cherilyn

8 days ago

I'm not sure about that. Option B, using Amazon Redshift, could also work well. That way, we can isolate the data and access for each department, and use Redshift's robust security features. It might be a bit more hands-on, but it could give us more control.

upvoted 0 times

...

Torie

9 days ago

I agree, option C seems like the most scalable and least operationally intensive solution. Creating individual IAM roles for each department would be a nightmare to manage as the data lake grows. The tag-based access control in Lake Formation should give us the flexibility we need.

upvoted 0 times

...

Jerry

10 days ago

Hmm, this is a tricky question. We need to consider the scale of the data lake and the need for granular access control across multiple departments. I'm leaning towards option C - using AWS Lake Formation tag-based access control. That way, we can easily manage access to specific tables and columns without creating a ton of IAM roles.

upvoted 0 times

...