QuestionQ4Verified/Data Life Cycle ManagementCopy linkReport a problemAsk AstroTutorSave questionWhich of the following data-lake zones requires sensitive data to be encrypted or tokenized?ATrusted zoneBClean zoneCRaw zoneDTemporal zoneShow AnswerAnswerExplanationThe raw zone stores source data in its original form, so it can contain sensitive information before later validation and transformation. Sensitive content in that zone must be protected through encryption, tokenization, or comparable controls. AWS guidance likewise describes masking sensitive rows or columns before ingestion into a raw layer and encrypting the raw-layer bucket.Learn moreHandling sensitive data - AWS Prescriptive GuidanceShow comments2Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion