Apply authorization mechanisms.
18 practice questions under this official exam objective (DEA-C01), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
18 total · page 1 of 1How Can Lambda Connect Privately to an RDS Instance with Least Overhead?
Connecting an AWS Lambda function to a private Amazon RDS instance requires VPC placement plus a security-group rule that references the Lambda's own
Which AWS Services Implement a Data Mesh with Centralized Governance?
A data mesh on AWS is built with Amazon S3 as the scalable storage layer, Athena for serverless analysis, and Lake Formation for centralized governanc
How Do You Fix SageMaker Studio Access Denied for Glue Sessions?
AWS Glue interactive sessions launched from Amazon SageMaker Studio return AccessDenied unless the engineer's IAM user is allowed to assume the Glue a
AWS Lake Formation Row-Level Security for S3 Data Hub
AWS Lake Formation provides native row-level security to restrict data access in an Amazon S3 data lake based on user attributes, such as country. Thi
Why Does QuickSight Report Insufficient Permissions for Athena S3 Data?
Amazon QuickSight dashboards backed by Athena over S3 fail with insufficient-permissions errors when the QuickSight service role cannot read the S3 bu
How to Separate Athena Query Access and Query History?
Athena workgroups isolate query execution and query history across users, teams, and applications in a single AWS account. The correct solution (B) cr
How to Fix EventBridge Lambda AccessDeniedException?
An EventBridge rule invoking a Lambda function needs correct authorization on both the EventBridge side and the Lambda resource-based policy. This DEA
Which S3 Encryption Option Lets Only Specific Employees Access the Keys?
Protecting S3 call logs with encryption keys that only specific employees can use points to SSE-KMS combined with an IAM policy scoped to the KMS key.
How to restrict S3 HR records by Region with Lake Formation?
This scenario tests region-scoped access to an Amazon S3 data lake using AWS Lake Formation. The correct approach is to register the S3 location and a
Secure Redshift Spectrum Access with VPC Endpoints
This question tests securing Amazon Redshift Spectrum access to S3 using VPC endpoints and enhanced VPC routing. The correct steps ensure data remains
How to Enforce Column-Level Athena Access with AWS Lake Formation?
Column-level access control for Amazon Athena over an S3 data lake and AWS Glue Data Catalog is implemented with AWS Lake Formation. This page establi
Least-overhead row- and column-level access for a multi-engine S3 data lake?
This question asks which AWS service delivers row-level and column-level authorization over an S3 data lake that is queried by Athena, Redshift Spectr
Sharing Redshift Data Products with Lake Formation
This page explains how to share Amazon Redshift data products across accounts using AWS Lake Formation for centralized governance and column-level sec
Lake Formation Data Filters for PII Access
AWS Lake Formation enables fine-grained access control, such as column-level restrictions, to secure PII in Amazon S3 data lakes with minimal effort w
Masking and Securing PII in AWS Data Pipelines
This question addresses how to automatically mask Personally Identifiable Information (PII) in S3 using AWS Glue DataBrew while securing access via IA
Secure On-Premises to AWS Data Transfer without Internet
This question tests the configuration of a private, secure network connection between on-premises infrastructure and AWS for data migration. The corre
Lambda S3 KMS Decryption Permissions
This question tests the authorization requirements for AWS Lambda functions accessing encrypted Amazon S3 objects. It establishes that separate IAM pe
Restricting AWS Glue Access by Prefix and Time with IAM
Learn how to restrict AWS Glue jobs to specific S3 prefixes and business hours using IAM policies. The correct solution combines S3 ARN wildcards in t