Exam DEA-C01 All QuestionsBrowse all questions from this exam
Go to Exam
Question 1

A data engineer is configuring an AWS Glue job to read data from an Amazon S3 bucket. The data engineer has set up the necessary AWS Glue connection details and an associated IAM role. However, when the data engineer attempts to run the AWS Glue job, the data engineer receives an error message that indicates that there are problems with the Amazon S3 VPC gateway endpoint.

The data engineer must resolve the error and connect the AWS Glue job to the S3 bucket.

Which solution will meet this requirement?

    Correct Answer: D

    When dealing with VPC gateway endpoints for Amazon S3, it is crucial to verify that the VPC's route table includes the necessary routes for the gateway endpoint. This ensures that traffic intended for the S3 bucket is properly routed through the VPC endpoint instead of going out to the internet. Therefore, verifying and potentially updating the VPC's route table to include routes for the Amazon S3 VPC gateway endpoint is the correct solution to resolve the connection issue faced by the AWS Glue job.

Discussion
Aesthet

Both ChatGPT and I agree with D

DevoteamAnalytix

:-)) nice

GiorgioGssOption: D

Although there is no such thing as "inbound and outbound routes" when we talk about VPC route table, when we define a S3 gateway endpoint we must have proper routes in place. I will go with D.

HunkyBunkyOption: D

A - wrong - AWS glue - are serverless service, so it don't have any security groups B - wrong - Because we have error with VPC, not with S3 itself C - wrong - Becuase with S3 - we always have only FQDN for buckets

alexbg88

they most certainly can have SGs.

VerRiOption: D

"problems with the Amazon S3 VPC gateway endpoint"

ampersandorOption: D

Be sure that the subnet configured for your AWS Glue connection has an Amazon S3 VPC gateway endpoint or a route to a NAT gateway in the subnet's route table. https://repost.aws/knowledge-center/glue-s3-endpoint-validation-failed

tai1123

What percentage did you get for this question on the exam? Has anyone passed the exam?

Amazon_Dumps_comOption: D

D is Valid ( DDDDDD )

lunachi4Option: D

I think D. We check "VPC's route table"

Manohar24Option: A

A is correct

teo2157Option: C

A - wrong - AWS glue doesn't have any security groups B - wrong - You can´t give permissions in the S3 to the AWS glue job but to the role D. wrong because there has to be a definend route for the S3 gateway endpoint in the subnet assigned to the glue job but not in the VPC's route table and also route tables doesn´t have inbound and outbound routes.

joekeviatworkOption: D

D is a accurate answer t.ly/AWSCertifiedDataEngineerAssociateDEA-C01

nanaw770Option: D

D is correct answer.

tgv

I will go with D, the other options don't seem to be related.

damaldon

Go with A: If you receive an error, check the following: The correct privileges are provided to the role selected. The correct Amazon S3 bucket is provided. The security groups and Network ACL allow the required incoming and outgoing traffic. The VPC you specified is connected to an Amazon S3 VPC endpoint.

Aesthet

some relevant info: main: https://docs.aws.amazon.com/glue/latest/dg/connection-VPC-disable-proxy.html additional (glue crawler instead of glue job here, but I think this is relevant for both): https://docs.aws.amazon.com/glue/latest/dg/connection-S3-VPC.html