DAS-C01 Question #122: Real Exam Question with Answer & Explanation

Question

A company has a marketing department and a finance department. The departments are storing data in Amazon S3 in their own AWS accounts in AWS Organizations. Both departments use AWS Lake Formation to catalog and secure their data. The departments have some databases and tables that share common names. The marketing department needs to securely access some tables from the finance department. Which two steps are required for this process? (Choose two.)

Options

• AThe finance department grants Lake Formation permissions for the tables to the external account
• BThe finance department creates cross-account IAM permissions to the table for the marketing
• CThe marketing department creates an IAM role that has permissions to the Lake Formation

Explanation

{"question_number": 1, "correct_answer": "A, C", "explanation": "Cross-account Lake Formation access requires two steps: (A) The data owner (finance department) must explicitly grant Lake Formation permissions on their tables to the external AWS account - Lake Formation is the authorization layer for data lake resources, and permissions must originate from the owning account. (C) The consuming account (marketing) must create an IAM role with Lake Formation permissions so that its principals can assume that role and access the shared resources. Option B is incorrect because Lake Formation, not cross-account IAM policies, is the correct mechanism for controlling table-level data lake access; IAM alone cannot grant access to Lake Formation-secured tables.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.