AWS Certified Data Engineer Associate Study Guide

Chapter 7. Data Security and Governance

In today’s internet world, the size of data is growing exponentially and is expected to grow even faster in the future. Irrespective of data size, you need to prioritize data security to avoid unauthorized data access and utilize governance to make sure your data meets the expected quality, has the required access controls in place to expose the data to your consumers, and has audit controls in place that can help you meet regulatory compliance needs.

In this chapter, we will dive deep into the following topics:

• How to secure your AWS workload with VPC and security groups

• How to integrate user authentication and authorization with AWS IAM

• How to enable data security and privacy by integrating different AWS services

• Understanding the different data governance pillars and which AWS services can be integrated to meet your requirements

At the end of this chapter, we will also provide a set of practice questions related to data security and governance that can help you understand the kind of questions you can expect and prepare for the role and certification exam accordingly. Let’s dive deep into the specific topics.

Network Security

In this section, we will explain how you can secure the networking elements involved in your AWS data analytics workloads with Amazon VPC, security groups, VPC endpoints, and more.

Amazon VPC Overview

An Amazon VPC (Virtual Private Cloud) is a logical construct that enables you to define a network perimeter for ...