SAA-C03 Question #225: Real Exam Question with Answer & Explanation

Question

A company stores sensitive customer data in an Amazon DynamoDB table. The company frequently updates the data. The company wants to use the data to personalize offers for customers. The company's analytics team has its own AWS account. The analytics team runs an application on Amazon EC2 instances that needs to process data from the DynamoDB tables. The company needs to follow security best practices to create a process to regularly share data from DynamoDB to the analytics team. Which solution will meet these requirements?

Options

• AExport the required data from the DynamoDB table to an Amazon S3 bucket as multiple JSON
• BAllow public access to the DynamoDB table. Create an IAM user that has permission to access
• CAllow public access to the DynamoDB table. Create an IAM user that has read-only permission
• DCreate a cross-account IAM role. Create an IAM policy that allows the AWS account ID of the

Explanation

Usingcross-account IAM rolesis the most secure and scalable way to share data between AWS Atrust relationshipallows the analytics team's account to assume the role in the main account and access the DynamoDB table directly. A is feasible but involves data duplication and additional costs for storing the JSON files in S3. B and C violate security best practices by allowing public access to sensitive data and sharing credentials, which is highly discouraged.

No community discussion yet for this question.