AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ69

Data Security and Governance

A company keeps customer-data tables, including customer addresses, in an AWS Lake Formation data lake. To meet new regulations, the company must ensure that users cannot access data for customers located in Canada.

The company requires a solution that prevents users from accessing rows for customers located in Canada.

Which solution meets this requirement with the LEAST operational effort?

  • A Set a row-level filter to prevent user access to a row where the country is Canada.
  • B Create an IAM role that restricts user access to an address where the country is Canada.
  • C Set a column-level filter to prevent user access to a row where the country is Canada.
  • D Apply a tag to all rows where Canada is the country. Prevent user access where the tag is equal to “Canada”.
Explanation

AWS Lake Formation data filters provide row-level security by applying a row filter expression to query results. Configuring a filter that excludes rows where country is Canada centrally prevents access to those customer records without managing separate data copies or per-row IAM policies.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!