A retailer keeps customer data in S3 that may contain PII. The company must ensure datasets containing PII are identified before sharing objects with partners. Which approach detects PII with the least manual effort?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure the S3 bucket and S3 objects to allow access to Amazon Macie. Use automated sensitive data discovery in Macie..
Why this is the answer
Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover, classify, and protect sensitive data in AWS, including PII in S3. Its automated sensitive data discovery feature continuously monitors S3 buckets, making it the most efficient and least manual option for identifying PII at scale. Monitoring S3 PUT operations with CloudTrail would only show when objects are added, not what data they contain. A custom Lambda function requires significant development and maintenance effort to accurately identify diverse PII patterns. Using AWS Glue Data Catalog and Athena with custom SQL queries would also be a manual and resource-intensive process, requiring knowledge of data schemas and PII patterns to write effective queries.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed