AWS Certified Data Engineer Associate DEA-C01 Practice Question
Your organization uses AWS Lake Formation to govern a raw data lake in Amazon S3. You registered the s3://finance-raw bucket and cataloged the transactions table in the finance database. Analysts already have Lake Formation SELECT on the table, yet Athena returns "Access Denied - insufficient Lake Formation permissions." Which additional Lake Formation permission will resolve the error without granting broader S3 or IAM access?
Grant Lake Formation DATA_LOCATION_ACCESS on the s3://finance-raw location.
Grant Lake Formation DESCRIBE permission on the default database.
Give the IAM role Lake Formation ALTER permission on the transactions table.
Attach an IAM policy that allows s3:GetObject on the finance-raw bucket.
For Athena to run a query, Lake Formation must be able to read metadata in the Glue Data Catalog. The service looks in the default database, so the querying principal needs at least DESCRIBE on that database. Without it, Lake Formation blocks the request and Athena reports "Access Denied." Granting DESCRIBE on the default database satisfies the metadata check; DATA_LOCATION_ACCESS is only required for creating resources, and adding direct S3 permissions or ALTER on the table would bypass governance or still fail the metadata lookup.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does Lake Formation DESCRIBE permission allow?
Open an interactive chat with Bash
Why does Athena require DESCRIBE on the default database to query Lake Formation tables?
Open an interactive chat with Bash
What is the difference between DATA_LOCATION_ACCESS and DESCRIBE permissions in Lake Formation?
Open an interactive chat with Bash
What does DESCRIBE permission in Lake Formation entail?
Open an interactive chat with Bash
Why is DATA_LOCATION_ACCESS not appropriate in this scenario?
Open an interactive chat with Bash
How does Lake Formation interact with Athena and Glue Data Catalog?
Open an interactive chat with Bash
AWS Certified Data Engineer Associate DEA-C01
Data Security and Governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .