Only some analysts may see a salary column in Redshift. What fits?
Why D is the answer
Column-level grants or dynamic data masking
Column-level security and masking limit what users see.
In detail
- Column grants or dynamic data masking control what each analyst sees.
- Grants hide a column, and masking changes what is shown.
Use case
An illustrative scenario, not a real incident.
Payroll sees salaries, and other analysts see masked values, in one Redshift table.
See it in different ways
flowchart TD A["Data protection"] --> B["At rest: KMS"] A --> C["In transit: TLS"] A --> D["For readers: masking"]
mindmap
root((Data security))
Identity
IAM roles
Secrets Manager
Fine-grained access
Lake Formation
Column grants
Encryption
SSE-KMS
Discovery
Macie
Audit
CloudTrailflowchart TD
Q{"What should others see?"}
Q -->|"Nothing"| A0["Column-level grants"]
Q -->|"A masked value"| A1["Dynamic data masking"]Key point: Column grants or masking limit exposure.
Why the other options are wrong
- A. A larger cluster
- Size does not control access.
- B. A new distribution key
- Distribution does not control access.
- C. A materialized view for everyone
- A view for everyone shows it to everyone.