A company leverages Amazon Athena for ad-hoc queries against data stored in Amazon S3. The company wants to implement additional controls to separate query execution and query history among users…

Question

Options

• ACreate an S3 bucket for each given use case, create an S3 bucket policy that grants permissions
• BCreate an Athena workgroup for each given use case, apply tags to the workgroup, and create an
• CCreate an IAM role for each given use case, assign appropriate permissions to the role for the
• DCreate an AWS Glue Data Catalog resource policy for each given use case that grants

• A
  5% (1)
• B
  77% (17)
• C
  5% (1)
• D
  14% (3)

Explanation

Amazon Athena Workgroups are purpose-built for exactly this requirement. A workgroup isolates query execution, enforces cost controls, and maintains separate query history per group. You can attach IAM policies to control which principals can use each workgroup, and tags enable cost allocation. The other options (S3 bucket policies, IAM roles alone, or Glue Data Catalog resource policies) control data access but do not separate query execution and query history, which are Athena-specific constructs only workgroups provide.

No community discussion yet for this question.