AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ185

Data Security and Governance

A company runs an extract, transform, and load (ETL) job in AWS Glue. The job processes personally identifiable information (PII) data and writes logs to an Amazon CloudWatch Logs log group. A data engineer must mask PII data in the CloudWatch Logs log group.

Which solution meets these requirements?

  • A Attach an AWS Glue security configuration to the ETL job.
  • B Configure a data protection policy. Attach the policy to the CloudWatch log group.
  • C Run an Amazon Macie sensitive data discovery job.
  • D Call AWS Glue sensitive data detection APIs in the ETL job.
Explanation

Amazon CloudWatch Logs data protection policies can audit and de-identify sensitive data in log events. A policy attached to the specific log group can use managed data identifiers for PII and a de-identify operation to mask matching values when the logs are viewed.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!