Q67 — AWS SAA-C03 Ch.13

Question 67 of 100 | ← Chapter 13

Q967. A solutions architect needs to review a company's Amazon S3 buckets to discover personally identifiable information (PII). The company stores the PII data in the us-east-1 Region and us-west-2 Region.Which solution will meet these requirements with the LEAST operational overhead?

Correct Answer: A. Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3.

Explanation

The correct answer is A. Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3.Here's why:A. Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3.- Amazon Macie is a purpose-built service for discovering and protecting sensitive data, including personally identifiable information (PII), in Amazon S3.- Configuring Macie in each Region (us-east-1 and us-west-2) allows it to analyze the data across both Regions.- Creating a Macie job to analyze the data in S3 is the most straightforward and lowest-overhead approach compared to the other options.B. Configure AWS Security Hub for all Regions. Create an AWS Config rule to analyze the data that is in Amazon S3.- AWS Security Hub is a broader security management service and not specifically designed for PII discovery.- Using AWS Config rules to analyze S3 data may require more setup and maintenance than the Macie solution.C. Configure Amazon Inspector to analyze the data that is in Amazon S3.- Amazon Inspector is an agent-based service for vulnerability assessment, not PII discovery.- It would require additional setup and configuration to use Inspector for this purpose, leading to higher operational overhead.D. Configure Amazon GuardDuty to analyze the data that is in Amazon S3.- Amazon GuardDuty is a threat detection service and does not have specific capabilities for PII discovery.- Using GuardDuty for this purpose would likely require custom development and lead to higher operational overhead.In summary, the Macie solution is the most straightforward and lowest-overhead approach to discovering PII in Amazon S3 across multiple Regions, as it is a purpose-built service for this use case.