Allianz Financial Services (AFS) is a banking group offering end-to-end banking and financial solutions in South East Asia through its consumer banking, business banking, Islamic banking, investment finance and stock broking businesses as well as unit trust and asset administration, having served the financial community over the past five decades. AFS uses Redshift on AWS to fulfill the data warehousing needs and uses S3 as the staging area to host files. AFS uses other services like DynamoDB, Aurora, and Amazon RDS on remote hosts to fulfill other needs. AFS want to implement Redshift database security. How can this be achieved? Select 4 options.

Answer options:

A.Groups are collections of users that can be collectively assigned privileges for easier security maintenance
B.By default, privileges are granted only to the object owner
C.Roles are collections of users that can be collectively assigned privileges for easier security maintenance
D.Amazon Redshift database users are named user accounts that can connect to a database. A user account is granted privileges explicitly, by having those privileges assigned directly to the account, or implicitly, by being a member of a group that is granted privileges
E.Schemas are collections of database tables and other database objects. Schemas are similar to operating system directories, except that schemas cannot be nested.
F.Databases are collections of tables and other schema objects. Databases are similar to operating system directories, except that databases cannot be nested.

Answer : A,B, D, E
Amazon Redshift database security by controlling which users have access to which database objects. Access to database objects depends on the privileges that you grant to user accounts or groups. The following guidelines summarize how database security works:
 By default, privileges are granted only to the object owner.
 Amazon Redshift database users are named user accounts that can connect to a database. A user account is granted privileges explicitly, by having those privileges assigned directly to the account, or implicitly, by being a member of a group that is granted privileges.
 Groups are collections of users that can be collectively assigned privileges for easier security maintenance.
 Schemas are collections of database tables and other database objects. Schemas are similar to operating system directories, except that schemas cannot be nested. Users can be granted access to a single schema or to multiple schemas.
https://docs.aws.amazon.com/redshift/latest/dg/r_Database_objects.html