DEA-C01 · Question #50
A company has multiple applications that use datasets that are stored in an Amazon S3 bucket. The company has an ecommerce application that generates a dataset that contains personally identifiable in
The correct answer is B. Create an S3 Object Lambda endpoint. Use the S3 Object Lambda endpoint to read data from. Amazon S3 Object Lambda allows you to add your own code to S3 GET requests to modify and process data as it is returned to an application. For example, you could use an S3 Object Lambda to dynamically redact personally identifiable information (PII) from data retrieved from S3. T
Question
A company has multiple applications that use datasets that are stored in an Amazon S3 bucket. The company has an ecommerce application that generates a dataset that contains personally identifiable information (PII). The company has an internal analytics application that does not require access to the PII. To comply with regulations, the company must not share PII unnecessarily. A data engineer needs to implement a solution that with redact PII dynamically, based on the needs of each application that accesses the dataset. Which solution will meet the requirements with the LEAST operational overhead?
Options
- ACreate an S3 bucket policy to limit the access each application has. Create multiple copies of the
- BCreate an S3 Object Lambda endpoint. Use the S3 Object Lambda endpoint to read data from
- CUse AWS Glue to transform the data for each application. Create multiple copies of the dataset.
- DCreate an API Gateway endpoint that has custom authorizers. Use the API Gateway endpoint to
How the community answered
(22 responses)- A23% (5)
- B64% (14)
- C9% (2)
- D5% (1)
Explanation
Amazon S3 Object Lambda allows you to add your own code to S3 GET requests to modify and process data as it is returned to an application. For example, you could use an S3 Object Lambda to dynamically redact personally identifiable information (PII) from data retrieved from S3. This would allow you to control access to sensitive information based on the needs of different applications, without having to create and manage multiple copies of your data.
Topics
Community Discussion
No community discussion yet for this question.