AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
A company using Amazon S3 must ensure no personally identifiable information (PII) is stored in its buckets as per regulations. The company needs a solution to automatically detect PII in S3 and alert the security team. What is the appropriate solution?
A company using Amazon S3 must ensure no personally identifiable information (PII) is stored in its buckets as per regulations. The company needs a solution to automatically detect PII in S3 and alert the security team. What is the appropriate solution?
Explanation:
The correct answer is A. Amazon Macie is a fully managed service that uses machine learning and pattern matching to discover and protect sensitive data in AWS. It is useful for automatically detecting PII in S3 buckets. By creating an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and sending an Amazon Simple Notification Service (Amazon SNS) notification to the security team, the company can efficiently meet its requirements. Although option C also involves Amazon Macie, it incorrectly specifies using Amazon SQS for notifications, which is less suitable for immediate alerts compared to SNS.