AWS Certified Data Engineer Associate DEA-C01 Practice Question
A data engineer needs an AWS Glue crawler to ingest and catalog tables that reside in an Amazon RDS for MySQL database located in a private subnet. The solution must avoid hard-coding credentials and should require the least manual work once configured. Which approach enables the crawler to connect to the database and populate the AWS Glue Data Catalog?
Enable the Amazon RDS Data API on the instance and provide the API endpoint to the crawler so it can enumerate tables through the Data API.
Attach an IAM role that grants the crawler access to the RDS instance; Glue crawlers will log in to the database automatically without a connection.
Export the RDS database snapshot to Amazon S3 and direct the crawler to the exported files so no network connection to the database is required.
Create an AWS Glue connection of type JDBC that points to the RDS endpoint, reference credentials stored in AWS Secrets Manager, specify the VPC subnet and security group in the connection, and select this connection when configuring the crawler.
A crawler that points to a JDBC data store can reach the source only when an AWS Glue connection of type JDBC exists. The connection stores the JDBC URL of the RDS endpoint, the network information (VPC, subnet, and security groups), and a reference to credentials that are best kept in AWS Secrets Manager. After the connection is created, the crawler simply selects it and can securely enumerate and catalog the tables. IAM alone cannot authenticate to MySQL, RDS snapshot exports remove real-time access, and Glue crawlers cannot use the RDS Data API to discover schemas, so those options will not meet the requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an AWS Glue connection?
Open an interactive chat with Bash
What is AWS Secrets Manager and how does it integrate with AWS Glue?
Open an interactive chat with Bash
Why can't IAM roles alone authenticate AWS Glue crawlers to MySQL databases?
Open an interactive chat with Bash
What is AWS Secrets Manager and why is it used here?
Open an interactive chat with Bash
Why is an AWS Glue connection of type JDBC required?
Open an interactive chat with Bash
How does specifying the VPC subnet and security group in the connection help the crawler?
Open an interactive chat with Bash
AWS Certified Data Engineer Associate DEA-C01
Data Store Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .