How can a company detect and notify security teams about PII in S3 buckets?

The correct answer is A. Use Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS. Amazon Macieis purpose-built for detecting PII in S3. Option A uses EventBridge to filter SensitiveData findings and notify via SNS, meeting the Options B and Dinvolve GuardDuty, which is not designed for PII detection. Option C uses SQS, which is less suitable for immediate…

Submitted by kim_seoul· Mar 4, 2026Design Secure Architectures

Question

Options

AUse Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS
BUse Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SNS
CUse Amazon Macie. Create an EventBridge rule for SensitiveData:S3Object/Personal findings
DUse Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SQS

How the community answered

(23 responses)

A
83% (19)
B
4% (1)
C
4% (1)
D
9% (2)

Explanation

Amazon Macieis purpose-built for detecting PII in S3. Option A uses EventBridge to filter SensitiveData findings and notify via SNS, meeting the Options B and Dinvolve GuardDuty, which is not designed for PII detection. Option C uses SQS, which is less suitable for immediate notifications.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice