DBS-C01 · Question #100
Developers have requested a new Amazon Redshift cluster so they can load new third-party marketing data. The new cluster is ready and the user credentials are given to the developers. The developers…
The correct answer is B. Create a new IAM role with read-only access to the Amazon S3 bucket and include the assume. https://docs.aws.amazon.com/redshift/latest/gsg/rs-gsg-create-an-iam-role.html "Now that you have created the new role, your next step is to attach it to your cluster. You can attach the role when you launch a new cluster or you can attach it to an existing cluster. In the next…
Question
Developers have requested a new Amazon Redshift cluster so they can load new third-party marketing data. The new cluster is ready and the user credentials are given to the developers. The developers indicate that their copy jobs fail with the following error message:
"Amazon Invalid operation: S3ServiceException:Access Denied,Status 403,Error AccessDenied." The developers need to load this data soon, so a database specialist must act quickly to solve this issue. What is the MOST secure solution?
Options
- ACreate a new IAM role with the same user name as the Amazon Redshift developer user ID.
- BCreate a new IAM role with read-only access to the Amazon S3 bucket and include the assume
- CCreate a new IAM role with read-only access to the Amazon S3 bucket with the assume role
- DCreate a new IAM user with access keys and a new role with read-only access to the Amazon S3
How the community answered
(29 responses)- A14% (4)
- B79% (23)
- C3% (1)
- D3% (1)
Explanation
https://docs.aws.amazon.com/redshift/latest/gsg/rs-gsg-create-an-iam-role.html "Now that you have created the new role, your next step is to attach it to your cluster. You can attach the role when you launch a new cluster or you can attach it to an existing cluster. In the next step, you attach the role to a new cluster." https://docs.aws.amazon.com/redshift/latest/dg/copy-usage_notes-access-permissions.html
Topics
Community Discussion
No community discussion yet for this question.