Free DAS-C01 Web TestEngine Demo

Q14 Single choice

A company needs a solution to control data access for the company's Amazon S3 data lake. The company expects the number of data sources in the data lake and the number of users that access the data to increase rapidly. All the data in the data lake is cataloged in an AWS Glue Data Catalog. Users access the data by using Amazon Athena and Amazon QuickSight.

A data analytics specialist must implement a solution that controls which users can ingest new data into the data lake. The solution also must restrict access to data at the column level and must provide audit capabilities.

Which solution will meet these requirements?

A
Use IAM resource-based policies to allow access to required S3 prefixes only. Use AWS CloudTrail for audit logs.
B
Use AWS Lake Formation access controls for the data in the data lake. Use AWS CloudTrail for audit logs.
C
Use IAM identity-based policies to allow access to authorized users only. Use Amazon CloudWatch for audit logs.
D
Use Athena federated queries to access the data in the data lake. Use S3 server access logs for audit logs.

DAS-C01 Web TestEngine demo