AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ351

Data Security and Governance

A company has deployed a lake house architecture in Amazon Redshift. The company needs to enable users to authenticate to the Redshift query editor by using a third-party identity provider (IdP).

A data engineer must configure the authentication mechanism.

What should the data engineer do first to satisfy this requirement?

  • A Register the third-party IdP as an identity provider in the configuration settings of the Redshift cluster.
  • B Register the third-party IdP as an identity provider from within Amazon Redshift.
  • C Register the third-party IdP as an identity provider for AVS Secrets Manager. Configure Amazon Redshift to use Secrets Manager to manage user credentials.
  • D Register the third-party IdP as an identity provider for AWS Certificate Manager (ACM). Configure Amazon Redshift to use ACM to manage user credentials.
Explanation

Amazon Redshift native identity provider federation requires registering the identity provider in Amazon Redshift so Redshift can establish communication with and authenticate identities from that provider. Secrets Manager stores database credentials, and ACM manages certificates; neither configures third-party IdP authentication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!