nerdexam
Amazon

SAA-C03 · Question #254

A company has an organization in AWS Organizations that has all features enabled. The company has multiple Amazon S3 buckets in multiple AWS Regions around the world. The S3 buckets contain…

The correct answer is B. For each Region in the Organizations management account, designate a delegated Amazon. Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS. To scale across Regions and accounts in AWS Organizations, Macie supports delegated administration, automated…

Submitted by paula_co· Mar 4, 2026Design Secure Architectures

Question

A company has an organization in AWS Organizations that has all features enabled. The company has multiple Amazon S3 buckets in multiple AWS Regions around the world. The S3 buckets contain sensitive data. The company needs to ensure that no personally identifiable information (PII) is stored in the S3 buckets. The company also needs a scalable solution to identify PII. Which solution will meet these requirements?

Options

  • AIn the Organizations management account, configure an Amazon Macie administrator IAM user
  • BFor each Region in the Organizations management account, designate a delegated Amazon
  • CFor each Region in the Organizations management account, configure a service control policy
  • DIn the Organizations management account, configure AWS Lambda functions to scan for PII in

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    79% (26)
  • C
    6% (2)
  • D
    12% (4)

Explanation

Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS. To scale across Regions and accounts in AWS Organizations, Macie supports delegated administration, automated sensitive data discovery, and multi-account aggregation through a centralized admin

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice