SAA-C03 Q137 · Analytics

Question

A company wants to implement a data lake in the AWS Cloud. The company must ensure that only specific teams have access to sensitive data in the data lake. The company must have rowlevel access control for the data lake. What should a solutions architect do to meet these requirements?

Accepted Answer

This answer satisfies every requirement:

1. **Data Lake in AWS Cloud**: Amazon S3 is the foundational storage layer for AWS data lakes. It provides virtually unlimited, durable, and cost-effective object storage — the industry standard for data lake architecture on AWS.

2. **Only specific teams have access to sensitive data**: AWS Lake Formation provides centralized **fine-grained access control** that lets you define permissions at the database, table, column, and **row** level. You can grant/revoke permissions to specific IAM users, roles, or groups (i.e., teams).

3. **Row-level access control**: Lake Formation supports **row-level security (RLS)** through data filters. You can create data filters that specify which rows a principal can access based on filter expressions. For example,

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips