Q59 — AWS SAA-C03 Ch.16

Question 59 of 100 | ← Chapter 16

Q1259. A healthcare company is designing a system to store and manage logs in the AWS Cloud.The system ingests and stores logs that are in JSON format. The logs contain sensitive patient information.The company must identify any sensitive data.The company must be able to search the log data by using SQL queries.Which solution will meet these requirements?

Correct Answer: A. Store the logs in an Amazon S3 bucket. Configure Amazon Macie to discover sensitive data. Use Amazon Athena to query the logs.

Explanation

The correct answer is A. Store the logs in an Amazon S3 bucket. Configure Amazon Macie to discover sensitive data. Use Amazon Athena to query the logs.Explanation:The healthcare company needs a solution that:Stores JSON logs (scalable and cost-effective).Identifies sensitive patient data (automated detection).Allows SQL-based searching (serverless querying).Why Option A is Correct:Amazon S3 is the best storage for JSON logs due to:Scalability (handles large volumes of logs).Cost-effectiveness (pay only for storage used).Native integration with other AWS services (Macie, Athena). Amazon Macie is a fully managed data security service that:Automatically detects sensitive data (PHI, PII, etc.) in S3 using ML. Classifies and reports findings (compliance with HIPAA/GDPR). Amazon Athena is a serverless interactive query service that:Runs SQL queries directly on S3 data (no ETL needed).Supports JSON parsing (ideal for log analysis).Pay-per-query pricing (cost-efficient for ad-hoc searches).Why the Other Options Are Incorrect:B. Store logs in Amazon EBS + SageMaker AI + Amazon RDSEBS is block storage (not designed for log storage/scaling). SageMaker is for ML training/inference, not sensitive data detection. RDS is a relational database, not optimized for log querying (would require complex ETL).C. Store logs in DynamoDB + KMS + Redshift SpectrumDynamoDB is a NoSQL database, not ideal for log storage (costly for large datasets). KMS manages encryption keys, not sensitive data discovery. Redshift Spectrum queries S3, but DynamoDB is not the right storage for logs.D. Store logs in S3 + Amazon Inspector + AthenaAmazon Inspector is for vulnerability assessments, not sensitive data detection.Macie is the correct service for PHI/PII discovery.Alternative Consideration (If Macie Isn't Available):If Amazon Macie is unavailable, another approach could be:Use AWS Glue + AWS Lambda to classify sensitive data (but this requires custom development). However, Option A is the most efficient and AWS-native solution.Conclusion:Option A is the best choice because:S3 provides scalable log storage.Macie automatically detects sensitive data.Athena enables SQL-based log queries.Meets all requirements (storage, detection, querying).Final Answer:A