QuestionQ140

Data Security and Governance

A data engineer is building a solution to identify sensitive information stored in a data lake that spans multiple Amazon S3 buckets. The solution must detect personally identifiable information (PII) in a proprietary data format.

Which solution meets these requirements with the LEAST operational overhead?

  • A Use the AWS Glue Detect PII transform with specific patterns.
  • B Use Amazon Made with managed data identifiers.
  • C Use an AWS Lambda function with custom regular expressions.
  • D Use Amazon Athena with a SQL query to match the custom formats.
Explanation

AWS Glue Detect PII can detect PII using custom detection entities defined with regular expressions and optional context words. This supports proprietary formats while using a managed transformation, avoiding the operational burden of maintaining custom Lambda code or Athena queries.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!