Câu 94: AWS Certified Data Engineer - Associate DEA-C01

A company has a data lake on AWS. The data lake ingests sources of data from business units. The company uses Amazon Athena for queries. The storage layer is Amazon S3 with an AWS Glue Data Catalog as a metadata repository. The company wants to make the data available to data scientists and business analysts. However, the company first needs to manage fine-grained, column-level data access for Athena based on the user roles and responsibilities. Which solution will meet these requirements?

1. A. Set up AWS Lake Formation. Define security policy-based rules for the users and applications by IAM role in Lake Formation. — đáp án hiện tại
2. B. Define an IAM resource-based policy for AWS Glue tables. Attach the same policy to IAM user groups.
3. C. Define an IAM identity-based policy for AWS Glue tables. Attach the same policy to IAM roles. Associate the IAM roles with IAM groups that contain the users.
4. D. Create a resource share in AWS Resource Access Manager (AWS RAM) to grant access to IAM users.