Topic 1 Question 129
A company stores customer data tables that include customer addresses in an AWS Lake Formation data lake. To comply with new regulations, the company must ensure that users cannot access data for customers who are in Canada.
The company needs a solution that will prevent user access to rows for customers who are in Canada.
Which solution will meet this requirement with the LEAST operational effort?
Set a row-level filter to prevent user access to a row where the country is Canada.
Create an IAM role that restricts user access to an address where the country is Canada.
Set a column-level filter to prevent user access to a row where the country is Canada.
Apply a tag to all rows where Canada is the country. Prevent user access where the tag is equal to “Canada”.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: A
Answer is A
👍 3komorebi2024/08/09 - 正解だと思う選択肢: A
The solution that will meet the requirement with the least operational effort is A.
Here's why:
Row-level security: AWS Lake Formation provides built-in row-level security, which allows you to control access to specific rows in a table based on conditions. This is precisely what's needed in this scenario.
Least operational effort: Once set up, this filter will automatically apply to all queries without needing to modify the data or create complex IAM policies.
Scalability: As new data is added to the table, the filter will automatically apply, requiring no additional effort.
Precision: It directly addresses the requirement by preventing access to rows where the country is Canada, without affecting other data.
👍 1AgboolaKun2024/11/08
シャッフルモード