SCS-C02 · Question #252
A security engineer needs to implement a solution to identify any sensitive data that s stored in an Amazon S3 bucket. The solution must report on sensitive data in the S3 bucket by using an existing
The correct answer is C. Configure Amazon Made to use managed data identifiers to identify and categorize sensitive. Amazon Macie is a fully managed service that automatically detects and classifies sensitive data stored in Amazon S3 using managed data identifiers. Macie can continuously monitor S3 buckets and provide detailed findings about sensitive data. By using an EventBridge rule, you can
Question
A security engineer needs to implement a solution to identify any sensitive data that s stored in an Amazon S3 bucket. The solution must report on sensitive data in the S3 bucket by using an existing Amazon Simple Notification Service (Amazon SNS) topic. Which solution will meet these requirements with the LEAST implementation effort?
Options
- AEnable AWS Config. Configure AWS Config to monitor for sensitive data in the S3 bucket and to
- BCreate an AWS Lambda function to scan the S3 bucket for sensitive data that matches a pattern.
- CConfigure Amazon Made to use managed data identifiers to identify and categorize sensitive
- DEnable Amazon GuardDuty Configure AWS CloudTrail S3 data events Create an Amazon
How the community answered
(23 responses)- A4% (1)
- B9% (2)
- C70% (16)
- D17% (4)
Explanation
Amazon Macie is a fully managed service that automatically detects and classifies sensitive data stored in Amazon S3 using managed data identifiers. Macie can continuously monitor S3 buckets and provide detailed findings about sensitive data. By using an EventBridge rule, you can trigger notifications to the existing SNS topic whenever sensitive data is identified, offering a solution with minimal implementation effort. Macie is specifically designed for this purpose, making it the most efficient option.
Topics
Community Discussion
No community discussion yet for this question.