A data analyst is designing an Amazon QuickSight dashboard using centralized sales data that resides in Amazon Redshift. The dashboard must be restricted so that a salesperson in Sydney, Australia…

Question

Options

• APlace the data sources for Australia and the US into separate SPICE capacity pools.
• BSet up an Amazon Redshift VPC security group for Australia and the US.
• CDeploy QuickSight Enterprise edition to implement row-level security (RLS) to the sales table.
• DDeploy QuickSight Enterprise edition and set up different VPC security groups for Australia and

• A
  14% (3)
• B
  5% (1)
• C
  73% (16)
• D
  9% (2)

Explanation

The requirement is to restrict rows of data visible to specific users based on their geographic location - this is a Row-Level Security (RLS) problem. Amazon QuickSight Enterprise edition supports RLS, which lets you attach a permissions dataset to a QuickSight dataset. This dataset maps each user or group to a filter (e.g., Country = 'Australia'), and QuickSight automatically applies the filter at query time. Options A and B involve VPC security groups and SPICE capacity, which control network access and performance but not data-level row filtering. Option D is incorrect because VPC security groups still do not enforce row-level data access control.

No community discussion yet for this question.