AWS Certified Data Engineer - Associate
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
Your company is using AWS Glue to process and analyze data from various sources. You need to ensure that the data catalog is properly secured and accessible only to authorized users. Which AWS service can you use to manage access control for the AWS Glue Data Catalog, and how can you implement fine-grained access control?
Explanation:
To manage access control for the AWS Glue Data Catalog and implement fine-grained access control, you should use AWS Lake Formation. This service provides a centralized interface for managing access to data stored in a data lake, including the AWS Glue Data Catalog. By using AWS Lake Formation, you can define fine-grained access control policies based on user roles and group memberships. While AWS IAM can be used for managing access to AWS services, it does not provide fine-grained access control for the data catalog. Amazon S3 bucket policies control access to S3 resources, not the data catalog. AWS KMS is used for encryption and key management, not for access control.