A company stores several petabytes of data across multiple AWS accounts. The company uses AWS Lake Formation to manage its data lake. The company's data science team wants to securely share selective data from its accounts with the company's engineering team for analytical purposes. Which solution will meet these requirements with the LEAST operational overhead?
ACopy the required data to a common account. Create an IAM access role in that account. Grant access by specifying a permission policy that includes users from the engineering team accounts as trusted entities.
BUse the Lake Formation permissions Grant command in each account where the data is stored to allow the required engineering team users to access the data.
CUse AWS Data Exchange to privately publish the required data to the required engineering team accounts.
DUse Lake Formation tag-based access control to authorize and grant cross-account permissions for the required data to the engineering team accounts.