SAA-C03 · Question #33
SAA-C03 Question #33: Real Exam Question with Answer & Explanation
The correct answer is C: Create one AWS Glue job for each customer Attach a security configuration to each job that uses. AWS Glue jobs are designed for extract, transform, and load (ETL) operations, which are perfect for transforming clinical trial data. AWS Glue integrates with AWS Key Management Service (KMS), allowing for customer-specific encryption keys, fulfilling the encryption requirement w
Question
A medical company wants to perform transformations on a large amount of clinical trial data that comes from several customers. The company must extract the data from a relational databasethatcontains the customer data. Then the company will transform the data by using a series of complex rules. The company will load the data to Amazon S3 when the transformations are complete. All data must be encrypted where it is processed before the company stores the data in Amazon S3. All data must be encrypted by using customer-specific keys. Which solution will meet these requirements with the LEAST amount of operational effort?
Options
- ACreate one AWS Glue job for each customer Attach a security configuration to each job that uses
- BCreate one Amazon EMR cluster for each customer Attach a security configuration to each
- CCreate one AWS Glue job for each customer Attach a security configuration to each job that uses
- DCreate one Amazon EMR cluster for each customer Attach a security configuration to each
Explanation
AWS Glue jobs are designed for extract, transform, and load (ETL) operations, which are perfect for transforming clinical trial data. AWS Glue integrates with AWS Key Management Service (KMS), allowing for customer-specific encryption keys, fulfilling the encryption requirement with minimal operational effort. Client-side encryption with AWS KMS ensures that the data is encrypted before it is sent to S3, aligning with the security needs specified in the scenario. AWS Glue: This managed ETL service simplifies data transformation, reduces operational overhead, and integrates seamlessly with KMS. CSE-KMS: Client-side encryption with KMS ensures that the data is encrypted with customer- specific keys before it is processed or stored in S3, offering robust security. Minimal Operational Overhead: Compared to managing an EMR cluster, AWS Glue automates much of the process, making it a lower-effort solution. AWS Documentation: According to the AWS Well-Architected Framework, encryption with AWS KMS offers strong security controls that meet the needs of industries requiring high levels of confidentiality.
Community Discussion
No community discussion yet for this question.