DAS-C01 · Question #87
A bank operates in a regulated environment. The compliance requirements for the country in which the bank operates say that customer data for each state should only be accessible by the bank's…
The correct answer is D. Load tabular data from Amazon S3 to Amazon QuickSight Enterprise edition by directly importing. To meet compliance requirements for state-level data access and enable the marketing team to gather insights from customer data stored in S3, the bank should load the tabular data into Amazon QuickSight Enterprise edition by directly importing it.
Question
A bank operates in a regulated environment. The compliance requirements for the country in which the bank operates say that customer data for each state should only be accessible by the bank's employees located in the same state. Bank employees in one state should NOT be able to access data for customers who have provided a home address in a different state. The bank's marketing team has hired a data analyst to gather insights from customer data for a new campaign being launched in certain states. Currently, data linking each customer account to its home state is stored in a tabular .csv file within a single Amazon S3 folder in a private S3 bucket. The total size of the S3 folder is 2 GB uncompressed. Due to the country's compliance requirements, the marketing team is not able to access this folder. The data analyst is responsible for ensuring that the marketing team gets one-time access to customer data for their campaign analytics project, while being subject to all the compliance requirements and controls. Which solution should the data analyst implement to meet the desired requirements with the LEAST amount of setup effort?
Options
- ARe-arrange data in Amazon S3 to store customer data about each state in a different S3 folder
- BLoad tabular data from Amazon S3 to an Amazon EMR cluster using s3DistCp.
- CLoad tabular data from Amazon S3 to Amazon Redshift with the COPY command.
- DLoad tabular data from Amazon S3 to Amazon QuickSight Enterprise edition by directly importing
How the community answered
(25 responses)- A8% (2)
- B12% (3)
- C4% (1)
- D76% (19)
Why each option
To meet compliance requirements for state-level data access and enable the marketing team to gather insights from customer data stored in S3, the bank should load the tabular data into Amazon QuickSight Enterprise edition by directly importing it.
Re-arranging data into state-specific S3 folders would enable S3-level access policies but would be complex to manage for granular user access and does not directly provide the interactive insights needed by a marketing data analyst.
Loading data to an Amazon EMR cluster is primarily for large-scale data processing and transformation, not for providing governed, interactive business intelligence access to a marketing data analyst for insights.
Loading data into Amazon Redshift with COPY command could store the data and Redshift supports RLS, but for a marketing team to gather insights through a visualization, a BI tool like QuickSight, which can apply RLS on imported data or data from Redshift, is a more direct and appropriate solution.
Amazon QuickSight Enterprise Edition supports row-level security (RLS), which can be configured to restrict data access based on attributes like 'state'. By importing data, the marketing data analyst can visualize insights while QuickSight ensures compliance by displaying only the authorized state-specific customer data.
Concept tested: Row-level security (RLS) with Amazon QuickSight
Source: https://docs.aws.amazon.com/quicksight/latest/user/restrict-access-on-data.html
Topics
Community Discussion
No community discussion yet for this question.