A retail company stores customer data in an Amazon S3 bucket. Some of the customer data contains personally identifiable information (PII) about customers. The company must not share PII data with…

Question

Options

• AConfigure the S3 bucket and S3 objects to allow access to Amazon Macie. Use automated
• BConfigure AWS CloudTrail to monitor S3 PUT operations. Inspect the CloudTrail trails to identify
• CCreate an AWS Lambda function to identify PII in S3 objects. Schedule the function to run
• DCreate a table in AWS Glue Data Catalog. Write custom SQL queries to identify PII in the table.

• A
  85% (22)
• B
  8% (2)
• C
  4% (1)
• D
  4% (1)

Explanation

Amazon Macie uses machine learning to automatically discover, classify, and report PII (such as names, SSNs, and financial data) within S3 objects. Configuring a Macie discovery job on the bucket requires minimal setup and runs automatically, making it the least manual intervention option. The discovery findings can then gate access to objects before sharing with partners. Option B (CloudTrail) logs API calls to S3 but does not inspect data content for PII. Option C (custom Lambda function) requires writing, testing, and maintaining PII detection logic - significant manual effort. Option D (custom SQL queries in Glue) also requires writing and maintaining PII detection queries manually.

No community discussion yet for this question.