Q3Data Security and Governance
A retail company has a customer data hub in an Amazon S3 bucket. Employees from many countries use the data hub to support company-wide analytics. A governance team must ensure that the company's data analysts can access data only for customers who are within the same country as the analysts. Which solution will meet these requirements with the LEAST operational effort?
← → navigate · a answer
Community votes
Discussion · 14
B 15
Selected Answer: B
AWS Lake Formation: It is built specifically for managing data lakes on AWS, with features for securing and controlling access to data.
Row-Level Security: With Lake Formation, you can set fine-grained access control policies, including row-level security. This lets you enforce rules that restrict access to data based on specific conditions, such as the country tied to each customer.
Least Operational Effort: Once the policies are defined in Lake Formation, they can be centrally managed and applied to the data in the S3 bucket without needing separate tables or views for each country, as in options A, C, and D. This lowers operational overhead and complexity.
2
Creating DataLake takes at least a few days to set up and the solution should be LEAST operational. I think B is not correct.
B 2
Selected Answer: B
B is the correct answer.
B 1
Selected Answer: B
Keyword "LEAST operational effort" - I am going with B
A 1
Selected Answer: A
Agreed with Bartosz. I think setting up DataLake, then integrating it with LakeFormation takes a lot more effort than just separate the table
B 1
Selected Answer: B
AWS really likes Lakeformation, plus creating separate tables might need some refactoring, and the requirement is about the LEAST operational effor
B 1
Selected Answer: B
Pick B. It means "with the LEAST operational effort".
A 1
Selected Answer: A
I agree it is A
B 1
Selected Answer: B
Strongly agree with B
B 1
Selected Answer: B
The right answer is B
B 1
Selected Answer: B
Option B fits the requirement with the least operational effort because AWS Lake Formation supports row-level security directly on S3 data. By registering the S3 data lake and applying row-level permissions, analysts can be limited to viewing only the customer records from their own country without needing separate tables, views, or region-specific copies of data.
B 1
Selected Answer: B
row-level filtering in data lake formation
B 1
Selected Answer: B
A: Seems like a bit too much effort.
B: Seems correct.
C: Regions would not do anything. No reason to move the data
D: Loading data into redshift needs more operational effort than B.
B 1
Selected Answer: B
row-level security