SAP-C02 · Question #809
A company is building an application on Amazon EMR to analyze data. The following user groups need to perform different actions: - Administrator: Provision EMR clusters from different configurations.
The correct answer is A. Configure AWS Service Catalog to control the Amazon EMR versions available for deployment,. AWS Service Catalog is the most appropriate solution to control and manage EMR cluster configurations and permissions for different user groups. It allows you to define a catalog of approved configurations, and you can control access to those configurations based on user groups.
Question
A company is building an application on Amazon EMR to analyze data. The following user groups need to perform different actions:
- Administrator: Provision EMR clusters from different configurations.
- Data engineer: Create an EMR cluster from a small set of available
configurations. Run ETL scripts to process data.
- Data analyst: Create an EMR cluster with a specific configuration.
Run SQL queries and Apache Hive queries on the data. A solutions architect must design a solution that gives each group the ability to launch only its authorized EMR configurations. The solution must provide the groups with least privilege access to only the resources that they need. The solution also must provide tagging for all resources that the groups create. Which solution will meet these requirements?
Options
- AConfigure AWS Service Catalog to control the Amazon EMR versions available for deployment,
- BConfigure Kerberos-based authentication for EMR clusters when the EMR clusters launch.
- CCreate IAM roles for each user group. Attach policies to the roles to define allowed actions for
- DUse AWS CloudFormation to launch EMR clusters with attached resource policies. Create an
How the community answered
(29 responses)- A79% (23)
- B7% (2)
- C3% (1)
- D10% (3)
Explanation
AWS Service Catalog is the most appropriate solution to control and manage EMR cluster configurations and permissions for different user groups. It allows you to define a catalog of approved configurations, and you can control access to those configurations based on user groups. By using Service Catalog, you can ensure that administrators have access to a broad set of configurations, while data engineers and analysts are limited to a specific set of configurations that they are authorized to use. Service Catalog also supports tagging, which is required for tracking resources, and it integrates with AWS Identity and Access Management (IAM) for least privilege access.
Community Discussion
No community discussion yet for this question.