Q10 — AWS SAA-C03 Ch.12

Question 10 of 100 | ← Chapter 12

Q810. A company stores text files in Amazon S3. The text files include customer chat messages, date and time information, and customer personally identifiable information (PII). The company needs a solution to provide samples of the conversations to an external service provider for quality control. The external service provider needs to randomly pick sample conversations up to the most recent conversation. The company must not share the customer PII with the external service provider. The solution must scale when the number of customer conversations increases.Which solution will meet these requirements with the LEAST operational overhead?

• A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point. ✓
• B. Create a batch process on an Amazon EC2 instance that regularly reads all new files, redacts the PII from the files, and writes the redacted files to a different S3 bucket. Instruct the external service provider to access the bucket that does not contain the PII.
• C. Create a web application on an Amazon EC2 instance that presents a list of the files, redacts the PII from the files, and allows the external service provider to download new versions of the files that have the PII redacted.
• D. Create an Amazon DynamoDB table. Create an AWS Lambda function that reads only the data in the files that does not contain PII. Configure the Lambda function to store the non-PII data in the DynamoDB table when a new file is written to Amazon S3. Grant the external service provider access to the DynamoDB table.

Correct Answer: A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point.

Explanation

To meet the requirements of providing sample conversations to an external service provider while ensuring customer personally identifiable information (PII) is not shared and minimizing operational overhead, the recommended solution is:A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point.\1. Creating an Object Lambda Access Point allows you to apply a Lambda function to the S3 GET request. This means that the Lambda function can modify the data before it is returned to the external service provider, allowing for redaction of PII.\2. By configuring the Lambda function to redact the PII when reading the file, you ensure that the external service provider only receives sample conversations without any customer PII. This ensures compliance with data privacy regulations and protects customer data.\3. Instructing the external service provider to access the Object Lambda Access Point simplifies the setup and reduces operational overhead. The external service provider can access the data directly without the need for additional data transfers or intermediate steps.Here's why the other options are not the best fit for the given requirements:B. Creating a batch process on an Amazon EC2 instance to regularly read, redact, and write files to a different S3 bucket: This option requires managing and scaling EC2 instances, implementing a batch process, and maintaining the infrastructure, resulting in higher operational overhead.C. Creating a web application on an Amazon EC2 instance to present a list of files and redact PII: This option requires building and maintaining a web application, which includes managing the EC2 instance, web server, and application code. It also introduces potential security concerns and adds additional complexity.D. Storing non-PII data in an Amazon DynamoDB table: This option does not address the requirement of providing sample conversations to the external service provider. It involves storing the non-PII data in DynamoDB, but the external service provider needs access to the conversations, not just the non-PII data.Therefore, the recommended solution to meet the requirements with the least operational overhead is:A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point.