Q7 — AWS SAA-C03 Ch.10

Question 7 of 100 | ← Chapter 10

Q607. A company stores data in Amazon S3. According to regulations, the data must not contain personally identifiable information (PII). The company recently discovered that S3 buckets have some objects that contain PII. The company needs to automatically detect PII in S3 buckets and to notify the company security team.Which solution will meet these requirements?

Correct Answer: A. Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team.

Explanation

The correct solution to meet the requirements is: A. Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team. Amazon Macie is a service specifically designed for data discovery and classification, including the detection of personally identifiable information (PII). By creating an EventBridge rule to filter the SensitiveData event type from Macie findings, you can automatically detect PII in S3 buckets. Sending an SNS notification to the security team ensures that they are promptly notified of any PII findings. Amazon GuardDuty, on the other hand, is a threat detection service that focuses on identifying malicious activity and unauthorized access. While it can be useful for overall security monitoring, it may not be the most suitable solution for specifically detecting PII in S3 buckets. Using Amazon SQS for notifications (option C and D) is not necessary in this case, as SNS can directly send notifications to the security team.