‹ All DEA-C01 questions

DEA-C01 Practice Question 70: Lake Formation Resource Link Shared Table

AWS Certified Data Engineer – Associate (DEA-C01) · Test 7 · question 10 of 10

Data Security and Governancehard

A producer account grants Lake Formation permissions on a Data Catalog table to a consumer account in the same AWS Organization. The consumer's data lake administrator can see the shared table, but analysts in the consumer account cannot query it from Amazon Athena. The team wants the analysts to query the table without copying any data. What should the administrator do?

Select one answer
Show answer and explanation

Answer:

  • C. Create a resource link to the shared table in a local database and grant the analysts access.

Lake Formation shares Data Catalog resources across accounts through AWS RAM. AWS notes that *"integrated services such as Athena and Amazon Redshift Spectrum require resource links to be able to include shared resources in queries."* The consumer administrator creates a resource link to the shared table in a database in their own catalog and grants analysts permissions on the link (and on the underlying shared table). Athena then queries the producer's data in place (option C).

- A is wrong because when the grantee account is in the same organization, *"the shared resource is available immediately."* An invitation is required only for accounts outside the organization. - B is wrong because with Lake Formation, data access is authorized through Lake Formation permissions rather than by adding individual principals to bucket policies. - D is wrong because copying the data is what the team wants to avoid, and it would create a second copy outside the producer's governance.

Reference: Cross-account data sharing in Lake Formation

Practice Test 7 ›

Study guides for DEA-C01