Q75 — AWS SAA-C03 Ch.13

Question 75 of 100 | ← Chapter 13

Q975. A company temporarily stages transactional datasets in an Amazon S3 bucket before the company moves the datasets to their final destinations. Some datasets include personally identifiable information (PII).The company must remove PII data during staging before the company moves the datasets to their destinations. A solutions architect needs to configure Amazon Macie to continuously monitor the datasets.Which solution will meet these requirements with the LEAST operational overhead?

• A. Create an AWS Lambda function to launch an Amazon Macie discovery job when a new dataset is stored in the target S3 bucket if a Macie discovery job is not already running. Create a second Lambda function to remove the PII data that the Macie discovery job finds.
• B. Set up Amazon Macie automated sensitive data discovery.Create an AWS Lambda function to remove the PII data that Macie finds.Configure an Amazon EventBridge rule to invoke the Lambda function when Macie discovers PII data. ✓
• C. Schedule a daily Amazon Macie discovery job. Create an AWS Lambda function to run once every day to remove the PII data that the daily Macie job finds.
• D. Create an AWS Lambda function that runs once each day to list all datasets that are saved to the S3 bucket every day. Call Amazon Macie on the list of datasets. Create a second Lambda function to remove the PII data that Macie finds. Configure an Amazon EventBridge rule to invoke the PII removal Lambda function every day.

Correct Answer: B. Set up Amazon Macie automated sensitive data discovery.Create an AWS Lambda function to remove the PII data that Macie finds.Configure an Amazon EventBridge rule to invoke the Lambda function when Macie discovers PII data.

Explanation

The correct answer is:B. Set up Amazon Macie automated sensitive data discovery. Create an AWS Lambda function to remove the PII data that Macie finds. Configure an Amazon EventBridge rule to invoke the Lambda function when Macie discovers PII data.Explanation:A. Create an AWS Lambda function to launch an Amazon Macie discovery job when a new dataset is stored in the target S3 bucket if a Macie discovery job is not already running. Create a second Lambda function to remove the PII data that the Macie discovery job finds.- This solution has higher operational overhead than the correct answer, as it requires managing two separate Lambda functions and the manual triggering of the Macie discovery job.B. Set up Amazon Macie automated sensitive data discovery. Create an AWS Lambda function to remove the PII data that Macie finds. Configure an Amazon EventBridge rule to invoke the Lambda function when Macie discovers PII data.- This is the correct solution. Amazon Macie can automatically discover and classify sensitive data, including PII, in the S3 bucket. By creating a Lambda function to remove the PII data and configuring an EventBridge rule to trigger the function when Macie discovers PII, the solution can be fully automated with the least operational overhead.C. Schedule a daily Amazon Macie discovery job. Create an AWS Lambda function to run once every day to remove the PII data that the daily Macie job finds.- This solution has higher operational overhead than the correct answer, as it requires scheduling the Macie discovery job and running the Lambda function daily, even if no new data is added to the S3 bucket. D. Create an AWS Lambda function that runs once each day to list all datasets that are saved to the S3 bucket every day. Call Amazon Macie on the list of datasets. Create a second Lambda function to remove the PII data that Macie finds. Configure an Amazon EventBridge rule to invoke the PII removal Lambda function every day.- This solution has higher operational overhead than the correct answer, as it requires managing two separate Lambda functions and the daily listing of datasets in the S3 bucket.In summary, the correct solution is option B, which uses Amazon Macie's automated sensitive data discovery and a single Lambda function triggered by EventBridge to remove the PII data, providing the least operational overhead.