QuestionQ273
Data Security and GovernanceA finance company uses Amazon Redshift as a data warehouse and stores its data in a shared Amazon S3 bucket. It uses Amazon Redshift Spectrum to access the data stored in that S3 bucket. The data is supplied by certified third-party data providers, each with distinct connection details.
To meet regulatory requirements, the company must ensure that no data can be accessed from outside the company's AWS environment.
Which combination of steps should the company take to satisfy these requirements?
Choose two
- A Replace the existing Redshift cluster with a new Redshift cluster that is in a private subnet. Use an interface VPC endpoint to connect to the Redshift cluster. Use a NAT gateway to give Redshift access to the S3 bucket.
- B Create an AWS CloudHSM hardware security module (HSM) for each data provider. Encrypt each data provider's data by using the corresponding HSM for each data provider.
- C Turn on enhanced VPC routing for the Amazon Redshift cluster. Set up an AWS Direct Connect connection and configure a connection between each data provider and the finance company’s VPC.
- D Define table constraints for the primary keys and the foreign keys.
- E Use federated queries to access the data from each data provider. Do not upload the data to the S3 bucket. Perform the federated queries through a gateway VPC endpoint.
Community Discussion