A company stores records that may include personally identifiable information (PII) in Amazon S3. They need a service that scans all S3 buckets for PII and sends immediate alerts when issues are found. Which AWS service should they use?
Choose an answer
Tap an option to check your answer.
Correct answer: Amazon Macie.
Why this is the answer
Amazon Macie is the correct choice because it is a data security and data privacy service that uses machine learning and pattern matching to discover, classify, and protect sensitive data in AWS, including PII stored in Amazon S3. It automatically detects sensitive data and provides alerts when it finds issues. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, not PII scanning. Amazon Detective helps investigate security findings and potential threats, but doesn't proactively scan for PII. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed