Answer-first summary for fast verification
Answer: Implement Lake Formation's tag-based access control for cross-account permissions to the engineering team.
The correct answer is D. Using Lake Formation tag-based access control to authorize and grant cross-account permissions for the required data is the most efficient approach with the least operational overhead. It allows for precise and scalable permissions management without the need for manual data copying or complex IAM roles and policies. This method leverages Lake Formation's built-in capabilities for secure and straightforward cross-account data sharing.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
In a scenario where a company manages a data lake with AWS Lake Formation across multiple accounts and needs to securely share data with the engineering team, which approach minimizes operational overhead for selective data access?
A
Centralize data in a common account, then set up IAM roles and permission policies for engineering team access.
B
Apply Lake Formation's Grant command across accounts to enable data access for the engineering team.
C
Leverage AWS Data Exchange for private data publication to the engineering team's accounts.
D
Implement Lake Formation's tag-based access control for cross-account permissions to the engineering team.
No comments yet.