DEA-C01 Data Ingestion and Transformation Practice Question
A company uses AWS Lake Formation to manage data lake permissions. A data engineer needs to grant an IAM role 'Read' access to a specific database and all its tables in the Data Catalog. What is the MOST efficient way to achieve this?
⚠ Common exam trap
It's easy for candidates to confuse 'Super' or admin roles with a simple read grant, or think that granting 'Describe' on the database is sufficient for read access, when in fact 'Select' on the tables is required for data access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Grant 'Select' on the database and select 'Include' to apply to all tables
Lake Formation allows granting 'Select' permission on a database with the 'Include' option, which automatically applies the same permission to all current and future tables in that database. This is the most efficient way to grant read access to an IAM role for a specific database and all its tables in the Data Catalog, as it avoids manual per-table grants.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Grant 'Super' permission on the Data Catalog
Why it's wrong here
Super is too broad and grants admin access.
- ✗
Add the IAM role to the Lake Formation administrators group
Why it's wrong here
Admin group grants full access, not just read.
- ✓
Grant 'Select' on the database and select 'Include' to apply to all tables
Why this is correct
This grants read access to all tables in one operation.
- ✗
Grant 'Describe' on the database and 'Select' on each table individually
Why it's wrong here
Individual grants are time-consuming.
Go deeper
Related to this question
About these practice questions
One of 1,711 original DEA-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DEA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C01 exam.