AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ111

Data Security and Governance

A company keeps customer data in an Amazon S3 bucket. Several teams in the company want to use that customer data for downstream analysis. The company must ensure that the teams cannot access customers' personally identifiable information (PII).

Which solution meets this requirement with the LEAST operational overhead?

  • A Use Amazon Macie to create and run a sensitive data discovery job to detect and remove PII.
  • B Use S3 Object Lambda to access the data, and use Amazon Comprehend to detect and remove PII.
  • C Use Amazon Data Firehose and Amazon Comprehend to detect and remove PII.
  • D Use an AWS Glue DataBrew job to store the PII data in a second S3 bucket. Perform analysis on the data that remains in the original S3 bucket.
Explanation

Amazon S3 Object Lambda can transform data as it is retrieved through an access point. A prebuilt Lambda integration powered by Amazon Comprehend can detect and redact PII before returning the object to an application, allowing analytical teams to access sanitized results while the original S3 object remains protected. Amazon Macie discovers and reports sensitive data rather than removing it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!