AWS Certified Data Analytics – Specialty — Question 113
A company has a marketing department and a finance department. The departments are storing data in Amazon S3 in their own AWS accounts in AWS
Organizations. Both departments use AWS Lake Formation to catalog and secure their data. The departments have some databases and tables that share common names.
The marketing department needs to securely access some tables from the finance department.
Which two steps are required for this process? (Choose two.)
Answer options
- A. The finance department grants Lake Formation permissions for the tables to the external account for the marketing department.
- B. The finance department creates cross-account IAM permissions to the table for the marketing department role.
- C. The marketing department creates an IAM role that has permissions to the Lake Formation tables.
Correct answer: A, C
Explanation
Option A is correct because the finance department must explicitly grant Lake Formation permissions to allow the marketing department to access their tables. Option C is also correct as the marketing department needs an IAM role with the necessary permissions to access the Lake Formation tables. Option B is incorrect because while cross-account IAM permissions are important, they are not the required steps to facilitate access through Lake Formation specifically.