Topic 1 Question 42
An advertising company uses AWS Lake Formation to manage a data lake. The data lake contains structured data and unstructured data. The company's ML engineers are assigned to specific advertisement campaigns. The ML engineers must interact with the data through Amazon Athena and by browsing the data directly in an Amazon S3 bucket. The ML engineers must have access to only the resources that are specific to their assigned advertisement campaigns. Which solution will meet these requirements in the MOST operationally efficient way?
Configure IAM policies on an AWS Glue Data Catalog to restrict access to Athena based on the ML engineers' campaigns.
Store users and campaign information in an Amazon DynamoDB table. Configure DynamoDB Streams to invoke an AWS Lambda function to update S3 bucket policies.
Use Lake Formation to authorize AWS Glue to access the S3 bucket. Configure Lake Formation tags to map ML engineers to their campaigns.
Configure S3 bucket policies to restrict access to the S3 bucket based on the ML engineers' campaigns.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: C
"engineers must have access to only the resources that are specific to their assigned advertisement campaigns" This is a clear use-case for lakeformation
👍 1GiorgioGss2024/11/27 - 正解だと思う選択肢: C
AWS Lake Formation → Tag resources with campaigns → Map ML engineers to campaigns → Fine-grained access control → Operational efficiency
👍 1Saransundar2024/12/05
シャッフルモード