AWS Certified Data Analytics – Specialty — Question 143

A company is providing analytics services to its sales and marketing departments. The departments can access the data only through their business intelligence
(BI) tools, which run queries on Amazon Redshift using an Amazon Redshift internal user to connect. Each department is assigned a user in the Amazon Redshift database with the permissions needed for that department. The marketing data analysts must be granted direct access to the advertising table, which is stored in
Apache Parquet format in the marketing S3 bucket of the company data lake. The company data lake is managed by AWS Lake Formation. Finally, access must be limited to the three promotion columns in the table.
Which combination of steps will meet these requirements? (Choose three.)

Answer options

• A. Grant permissions in Amazon Redshift to allow the marketing Amazon Redshift user to access the three promotion columns of the advertising external table.
• B. Create an Amazon Redshift Spectrum IAM role with permissions for Lake Formation. Attach it to the Amazon Redshift cluster.
• C. Create an Amazon Redshift Spectrum IAM role with permissions for the marketing S3 bucket. Attach it to the Amazon Redshift cluster.
• D. Create an external schema in Amazon Redshift by using the Amazon Redshift Spectrum IAM role. Grant usage to the marketing Amazon Redshift user.
• E. Grant permissions in Lake Formation to allow the Amazon Redshift Spectrum role to access the three promotion columns of the advertising table.
• F. Grant permissions in Lake Formation to allow the marketing IAM group to access the three promotion columns of the advertising table.

Correct answer: B, D, E

Explanation

The correct steps are B, D, and E. Step B is essential as it provides the necessary permissions for Lake Formation, allowing Redshift to access the S3 data. Step D creates the external schema required to query the data, and step E ensures that the Redshift Spectrum role has access to the specific columns needed. The other options either do not address the requirements directly or are incomplete for granting the necessary access.