Question #1035
A company is building a reporting system using their data lake on AWS, which includes data stored in Amazon S3 and Amazon Aurora PostgreSQL. They need a data visualization solution that integrates all data sources. The security team requires that only the executive team can view all dashboards, while other employees should have access only to specific dashboards based on their department. Which solution meets these requirements?
Create an analysis in Amazon QuickSight. Connect all data sources and create datasets. Publish dashboards and share them with the appropriate IAM roles tied to departments and the executive team.
Create an analysis in Amazon QuickSight. Connect all data sources and create datasets. Publish dashboards and share them with the appropriate users and groups mapped to departments and the executive team.
Use AWS Glue crawlers to catalog the data in Amazon S3. Create an AWS Glue ETL job to generate reports. Store the reports in Amazon S3 and use bucket policies to restrict access based on departments and executive roles.
Use AWS Glue crawlers for Amazon S3 data and Amazon Athena Federated Query for Aurora PostgreSQL. Generate reports using Athena, store them in Amazon S3, and control access with bucket policies for departments and executives.
Explanation
Answer B is correct because Amazon QuickSight natively supports user/group-based permissions for dashboard access. By creating groups (e.g., departments, executives) and sharing dashboards with them, the company can ensure executives view all dashboards while restricting others to their department.
Option A is incorrect because IAM roles are not used for granular dashboard access in QuickSight; it relies on user/group permissions. Options C and D use S3 bucket policies, which are not designed for dashboard-level access control and lack QuickSight's interactive visualization features. The key takeaway is that QuickSight's built-in sharing model aligns with dynamic, role-based dashboard access requirements.
Answer
The correct answer is: B