A company has an Amazon Redshift data warehouse that users access by using a variety of IAM roles. More than 100 users access the data warehouse every day. The company wants to control user access…

Question

Options

• AUse the role-based access control (RBAC) feature of Amazon Redshift.
• BUse the row-level security (RLS) feature of Amazon Redshift.
• CUse the column-level security (CLS) feature of Amazon Redshift.
• DUse dynamic data masking policies in Amazon Redshift.

• A
  88% (15)
• B
  6% (1)
• C
  6% (1)

Explanation

Amazon Redshift's Role-Based Access Control (RBAC) feature allows administrators to define roles that map directly to job functions (e.g., analyst, engineer, manager) and assign granular privileges to those roles. Users are then assigned to roles, inheriting the appropriate permissions. This directly addresses control based on 'job role and permissions.' RBAC can also be combined with other features to address sensitivity levels. Row-Level Security (B) restricts which rows a user can see-useful for data segregation but does not address job-role assignment holistically. Column-Level Security (C) restricts which columns are visible-useful for hiding sensitive fields but not a complete access governance solution. Dynamic data masking (D) obfuscates data values rather than controlling access.

No community discussion yet for this question.