Data World 5 · Warehouse and Scale · Stage 5

Share the Warehouse

Share live data without copying it, to a workgroup, to another account, and to a role beside you: what each one may see is decided at a different gate.

Datashares
Cross-account sharing
Database roles
Row-level security
Dynamic data masking

Domain: Data engineering
World: Data World 5: Warehouse and Scale (Associate)
Game type: Warehouse: Shape a warehouse's loads and tables so every slice does its share.
Time: About 25 minutes on a first attempt (estimated)
Exam guides: DEA-C01Skill 4.5.1: Grant permissions for data sharing (for example, data sharing for Amazon Redshift); Skill 4.2.3: Provide database users, groups, and roles access and authority in a database (for example, for Amazon Redshift); Skill 4.2.5: Apply authorization methods that address business needs (role-based, tag-based, and attribute-based); Skill 4.3.1: Apply data masking and anonymization according to compliance laws or company policies; Skill 4.3.3: Configure encryption across AWS account boundaries; Skill 4.5.7: Describe governance data framework and data sharing patterns; Skill 2.1.6: Manage locks to prevent access to data (for example, Amazon Redshift, Amazon RDS); Skill 2.4.4: Establish data lineage by using AWS tools (for example, Amazon SageMaker ML Lineage Tracking and Amazon SageMaker Catalog)
SCS-C03Skill 4.2.2: Design attribute-based access control (ABAC) and role-based access control (RBAC) strategies (for example, by configuring resource access based on tags or attributes)