A company has five offices in different AWS Regions. Each office has its own human resources (HR) department that uses a unique IAM role. The company stores employee records in a data lake that is based on Amazon S3 storage. A data engineering team needs to limit access to the records. Each HR department should be able to access records for only employees who are within the HR department's Region. Which combination of steps should the data engineering team take to meet this requirement with the LEAST operational overhead? (Choose two.)

Question

Accepted Answer

B. Register the S3 path as an AWS Lake Formation location. D. Enable fine-grained access control in AWS Lake Formation. Add a data filter for each Region.

Answer

A. Use data filters for each Region to register the S3 paths as data locations.

Answer

C. Modify the IAM roles of the HR departments to add a data filter for each department's Region.

Answer

E. Create a separate S3 bucket for each Region. Configure an IAM policy to allow S3 access.

A company has five offices in different AWS Regions. Each office has its own human resources (HR) department that uses a unique IAM role. The company stores employee records in a data lake that is bas

Question

Options

How the community answered

Explanation

Topics

Community Discussion