AWS Certified Data Engineer Associate DEA-C01 Practice Question
A data engineer must catalog tables from an Amazon RDS for MySQL database that sits in a private subnet with no NAT or internet gateway. The engineer is creating a new AWS Glue crawler to read the schema. Which configuration will allow the crawler to reach the database without exposing it publicly or adding extra network infrastructure?
Create a network connection that uses a public subnet with an internet gateway so the crawler can reach the database over its public endpoint.
Do not create any connection; selecting Amazon RDS as the data store is sufficient because Glue can connect to all regional RDS endpoints by default.
Create a JDBC AWS Glue connection that specifies the RDS endpoint, references credentials in AWS Secrets Manager, and selects the same VPC, private subnet, and a security group allowing port 3306.
Create a JDBC connection with the default Glue security group; the crawler will automatically route through the account's NAT gateway.
A JDBC-type AWS Glue connection is required for a crawler that targets an RDS database. By selecting the same VPC, one of the private subnets that already hosts the DB instance, and a security group that permits inbound TCP 3306 traffic from the Glue-managed ENIs, the service can place ENIs inside that subnet and reach the database directly. Storing the credentials in AWS Secrets Manager lets the crawler authenticate without hard-coding passwords. Because the connection remains inside the VPC, no internet gateway or NAT device is needed. The other options either place the database in a public subnet, rely on a NAT gateway, or assume that no connection is required, all of which conflict with best practices for a private RDS instance.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a JDBC connection in AWS Glue?
Open an interactive chat with Bash
How does AWS Secrets Manager help with database credentials in Glue?
Open an interactive chat with Bash
Why is it best practice to keep an RDS instance in a private subnet?
Open an interactive chat with Bash
Why does the Glue crawler need a JDBC connection for an RDS database?
Open an interactive chat with Bash
What is the purpose of AWS Secrets Manager in this configuration?
Open an interactive chat with Bash
How does the Glue crawler reach a private RDS instance within the same VPC?
Open an interactive chat with Bash
AWS Certified Data Engineer Associate DEA-C01
Data Store Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .