DAS-C01 Question #172: Real Exam Question with Answer & Explanation

Question

A retail company is using an Amazon S3 bucket to host an ecommerce data lake. The company is using AWS Lake Formation to manage the data lake. A data analytics specialist must provide access to a new business analyst team. The team will use Amazon Athena from the AWS Management Console to query data from existing web_sales and customer tables in the ecommerce database. The team needs read-only access and the ability to uniquely identify customers by using first and last names. However, the team must not be able to see any other personally identifiable data. The table structure is as follows: Which combination of steps should the data analytics specialist take to provide the required permission by using the principle of least privilege? (Choose three.)

Options

• AIn AWS Lake Formation, grant the business_analyst group SELECT and ALTER permissions for the
• BIn AWS Lake Formation, grant the business_analyst group the SELECT permission for the web_sales
• CIn AWS Lake Formation, grant the business_analyst group the SELECT permission for the customer
• DIn AWS Lake Formation, grant the business_analyst group SELECT and ALTER permissions for the
• ECreate users under a business_analyst IAM group. Create a policy that allows the
• FCreate users under a business_analyst IAM group. Create a policy that allows the