Q10 — AWS SAA-C03 Ch.11

Question 10 of 100 | ← Chapter 11

Q710. A company stores text files in Amazon S3. The text files include customer chat messages, date and time information, and customer personally identifiable information (Pll).The company needs a solution to provide samples of the conversations to an external service provider for quality control. The external service provider needs to randomly pick sample conversations up to the most recent conversation.The company must not share the customer Pll with the external service provider. The solution must scale when the number of customer conversations increasesWhich solution will meet these requirements with the LEAST operational overhead?

• A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the Pll when the function reads the file. Instruct the external service provider to access the Obiect Lambda Access Point ✓
• B. Create a batch process on an Amazon EC2 instance that regularly reads all new files, redacts the Pll from the files. and writes the redacted files to a different S3 bucket. Instruct the external service provider to access the bucket that does not contain the Pll
• C. Create a web application on an Amazon EC2 instance that presents a list of the files. redacts the Pll from the files, and allows the external service provider to download new versions of the files that have the Pll redacted
• D. Create an Amazon DynamoDB table. Create an AWS Lambda function that reads only the data in the files that does not contain Pll. Configure the Lambda function to store the non-Pll data in the DynamoDB table when a new file is written to Amazon S3. Grant the external service provider access to the DynamoDB table

Correct Answer: A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the Pll when the function reads the file. Instruct the external service provider to access the Obiect Lambda Access Point

Explanation

To meet the requirements of providing samples of conversations to an external service provider for quality control while ensuring that customer personally identifiable information (PII) is not shared, the following solution with the least operational overhead should be implemented:A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point.Option A provides a streamlined solution with minimal operational overhead for providing sample conversations to the external service provider while redacting customer PII:- Create an Object Lambda Access Point: An Object Lambda Access Point allows you to add custom code to process data as it is being retrieved from an S3 bucket. This enables you to modify the content of the files dynamically.- Create an AWS Lambda function that redacts the PII when the function reads the file: You can create a Lambda function that is triggered when the external service provider accesses the Object Lambda Access Point. The Lambda function can perform the necessary redaction of customer PII from the file content before it is returned to the external service provider.- Instruct the external service provider to access the Object Lambda Access Point: By directing the external service provider to access the Object Lambda Access Point, they will receive the sample conversations with the redacted customer PII.Option B, creating a batch process on an Amazon EC2 instance to regularly read and redact files, introduces additional operational overhead by requiring the setup and management of an EC2 instance and a batch process to handle the file processing. It is also less scalable compared to the serverless approach of using Lambda.Option C, creating a web application on an EC2 instance to present and redact files, also introduces additional operational overhead by requiring the setup and management of an EC2 instance