AWS Certified Developer - Associate
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
How can a developer ensure that no personally identifiable information (PII) is transmitted outside of EC2 instances when using AWS X-Ray for an application that handles encrypted PII sent to Amazon CloudWatch?
Explanation:
The correct answer is A. By manually instrumenting the X-Ray SDK in the application code, the developer can have full control over which data is included in the trace messages. This method allows the developer to ensure that no personally identifiable information (PII) is sent to AWS X-Ray by carefully handling the PII within the application and not including it in the trace messages. Auto-instrumentation does not inherently remove or redact PII, making manual instrumentation the safest choice for ensuring PII does not leave the EC2 instances.