Câu 25: AWS Certified Data Engineer - Associate DEA-C01

A company has five offices in different AWS Regions. Each office has its own human resources (HR) department that uses a unique IAM role. The company stores employee records in a data lake that is based on Amazon S3 storage. A data engineering team needs to limit access to the records. Each HR department should be able to access records for only employees who are within the HR department's Region. Which combination of steps should the data engineering team take to meet this requirement with the LEAST operational overhead? (Choose two.)

1. A. Use data filters for each Region to register the S3 paths as data locations.
2. B. Register the S3 path as an AWS Lake Formation location. — đáp án hiện tại
3. C. Modify the IAM roles of the HR departments to add a data filter for each department's Region.
4. D. Enable fine-grained access control in AWS Lake Formation. Add a data filter for each Region. — đáp án hiện tại
5. E. Create a separate S3 bucket for each Region. Configure an IAM policy to allow S3 access. Restrict access based on Region.