SAA-C03 · Question #200
A solutions architect is building an Amazon S3 data lake for a company. The company uses Amazon Kinesis Data Firehose to ingest customer personally identifiable information (PII) and transactional dat
The correct answer is A. Create an AWS Lambda function to detect and mask PII. Invoke the function from Kinesis Data. Using a Lambda function as part of the Kinesis Data Firehose pipeline allows for real-time detection and masking of PII before data is written to S3. This ensures that PII is never stored in its raw form in the data lake. Option B: Amazon Macie can scan and classify data but does
Question
A solutions architect is building an Amazon S3 data lake for a company. The company uses Amazon Kinesis Data Firehose to ingest customer personally identifiable information (PII) and transactional data in near real-time to an S3 bucket. The company needs to mask all PII data before storing thedata in the data lake. Which solution will meet these requirements?
Options
- ACreate an AWS Lambda function to detect and mask PII. Invoke the function from Kinesis Data
- BUse Amazon Macie to scan the S3 bucket. Configure Macie to detect and mask PII.
- CEnable server-side encryption (SSE) on the S3 bucket.
- DCreate an AWS Lambda function that integrates with AWS CloudHSM. Configure the function to
How the community answered
(45 responses)- A78% (35)
- B13% (6)
- C2% (1)
- D7% (3)
Explanation
Using a Lambda function as part of the Kinesis Data Firehose pipeline allows for real-time detection and masking of PII before data is written to S3. This ensures that PII is never stored in its raw form in the data lake. Option B: Amazon Macie can scan and classify data but does not provide in-line PII masking for Option C: Server-side encryption secures data but does not mask PII. Option D: CloudHSM is unnecessary for PII masking and adds complexity without addressing the
Community Discussion
No community discussion yet for this question.