DEA-C01 Question #46: Real Exam Question with Answer & Explanation

Question

A data engineer needs to use an Amazon QuickSight dashboard that is based on Amazon Athena queries on data that is stored in an Amazon S3 bucket. When the data engineer connects to the QuickSight dashboard, the data engineer receives an error message that indicates insufficient permissions. Which factors could cause to the permissions-related errors? (Choose two.)

Options

• AThere is no connection between QuickSight and Athena.
• BThe Athena tables are not cataloged.
• CQuickSight does not have access to the S3 bucket.
• DQuickSight does not have access to decrypt S3 data.
• EThere is no IAM role assigned to QuickSight.

Explanation

Insufficient permissions errors when Amazon QuickSight queries Athena data in S3 typically stem from QuickSight lacking access to the S3 bucket or lacking decryption permissions for encrypted S3 data.

Common mistakes.

• A. If there were no connection between QuickSight and Athena, the error would likely be a connection failure or resource not found, not specifically an 'insufficient permissions' error related to data access.
• B. If Athena tables were not cataloged, the query would fail due to unknown schema or table not found, rather than a permissions error on the underlying data itself.
• E. QuickSight operates with service-linked roles or explicitly configured IAM roles; if no role was assigned, QuickSight itself might not function, but the error specifically points to data access permissions rather than QuickSight's operational status.

Concept tested. Amazon QuickSight, Athena, S3, and KMS permissions

Reference. https://docs.aws.amazon.com/quicksight/latest/user/s3-permission-policy.html

No community discussion yet for this question.