During an internal audit, a company wants to ensure that data in an Amazon S3 bucket used by the company’s AWS Lake Formation data lake contains no sensitive customer or employee data. The company needs to discover personally identifiable information (PII) and financial data such as passport and credit card numbers. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure Amazon Macie to run a data discovery job that uses managed identifiers for the required data types..
Why this is the answer
Amazon Macie is a data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS. It can automatically detect PII and financial data like passport and credit card numbers using its built-in managed identifiers, making it the ideal solution for this requirement. AWS Audit Manager is for auditing compliance with regulations and industry standards, not for discovering sensitive data within S3 objects. Amazon S3 Inventory provides a list of objects in a bucket but doesn't analyze their content for sensitive information. Amazon S3 Select allows you to retrieve a subset of data from an S3 object using SQL expressions, but it doesn't automatically identify sensitive data types.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed