AWS Certified Data Engineer – Associate (DEA-C01) — Question 215

A company uses an Amazon Redshift cluster as a data warehouse that is shared across two departments. To comply with a security policy, each department must have unique access permissions.

Department A must have access to tables and views for Department A. Department B must have access to tables and views for Department B.

The company often runs SQL queries that use objects from both departments in one query.

Which solution will meet these requirements with the LEAST operational overhead?

Answer options

• A. Group tables and views for each department into dedicated schemas. Manage permissions at the schema level.
• B. Group tables and views for each department into dedicated databases. Manage permissions at the database level.
• C. Update the names of the tables and views to follow a naming convention that contains the department names. Manage permissions based on the new naming convention.
• D. Create an IAM user group for each department. Use identity-based IAM policies to grant table and view permissions based on the IAM user group.

Correct answer: A

Explanation

The correct answer is A because organizing tables and views into dedicated schemas allows for straightforward management of permissions at the schema level, which minimizes operational overhead. Option B creates additional complexity by requiring separate databases, while option C complicates access management with naming conventions. Option D involves more complex IAM configurations and may not directly address the schema-level permission needs.