Play free

Data World 4 · Lake Guardians · Stage 1

Who Holds the Keys

A grant that changes nothing: find who really decides what the analysts see.

  • IAMAllowedPrincipals
  • Registered locations
  • GetDataAccess
  • Default permissions for new tables
Domain
Data engineering
World
Data World 4: Lake Guardians (Associate)
Game type
Lake access: Grant a governed lake's tables; the matrix shows each principal's cells.
Time
About 15 minutes on a first attempt (estimated)
Exam guides
  • DEA-C01Skill 4.2.4: Manage permissions through AWS Lake Formation (for Amazon Redshift, Amazon EMR, Amazon Athena, and Amazon S3); Skill 4.2.6: Construct custom policies that meet the principle of least privilege; Skill 4.1.2: Create and update IAM groups, roles, endpoints, and services
  • SCS-C03Skill 4.2.5: Investigate and correct unintended permissions, authorizations, or privileges granted to a resource, service, or entity (for example, IAM Access Analyzer)