nerdexam
Amazon

DVA-C02 · Question #526

An Amazon Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and…

The correct answer is A. Implement Firehose data transformation as an AWS Lambda function. Configure the function to. Amazon Data Firehose natively supports invoking a Lambda function to transform records in-flight before delivering them to the destination, making it the correct solution for removing PII patterns.

Submitted by kevin_r· Mar 5, 2026Development with AWS Services

Question

An Amazon Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket. What should the developer do to meet these requirements?

Options

  • AImplement Firehose data transformation as an AWS Lambda function. Configure the function to
  • BLaunch an Amazon EC2 instance. Set the EC2 instance as the destination of the delivery stream.
  • CCreate an Amazon OpenSearch Service instance. Set the OpenSearch Service instance as the
  • DCreate an AWS Step Functions workflow to remove the customer identifiers. As the last step in

How the community answered

(39 responses)
  • A
    85% (33)
  • B
    3% (1)
  • C
    5% (2)
  • D
    8% (3)

Why each option

Amazon Data Firehose natively supports invoking a Lambda function to transform records in-flight before delivering them to the destination, making it the correct solution for removing PII patterns.

AImplement Firehose data transformation as an AWS Lambda function. Configure the function toCorrect

Firehose data transformation allows you to configure a Lambda function that receives batches of records from the delivery stream, processes them (such as using regex to remove PII identifiers), and returns the transformed records. Firehose then delivers only the sanitized data to the S3 bucket without requiring any additional infrastructure.

BLaunch an Amazon EC2 instance. Set the EC2 instance as the destination of the delivery stream.

Setting an EC2 instance as the Firehose destination adds unneeded infrastructure complexity and does not natively support pattern-based data transformation before S3 storage.

CCreate an Amazon OpenSearch Service instance. Set the OpenSearch Service instance as the

Amazon OpenSearch Service is designed for indexing and searching data, not for transforming and routing records to S3 after removing PII.

DCreate an AWS Step Functions workflow to remove the customer identifiers. As the last step in

While Step Functions can orchestrate data processing, it is not natively integrated as a Firehose transformation mechanism and adds unnecessary architectural complexity when Firehose's built-in Lambda transformation already solves the problem.

Concept tested: Amazon Data Firehose Lambda data transformation for PII removal

Source: https://docs.aws.amazon.com/firehose/latest/dev/data-transformation.html

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DVA-C02 Practice