AIF-C01 Question 224
Select 4Your organization is using Amazon S3 to store sensitive customer data. To comply with regulatory requirements and ensure proper data governance, which strategies should you implement to monitor and manage the data lifecycle effectively?
- A
Enable S3 Object Lifecycle Policies to automate data transitions and deletions.
- B
Use AWS CloudTrail to log access and API activities associated with S3 objects.
- C
Store all data in the S3 Standard storage class indefinitely to simplify management.
- D
Enable S3 Object Lock to enforce retention policies for critical data.
- E
Monitor S3 bucket access patterns using Amazon S3 Storage Lens.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Implementing data governance strategies like lifecycle policies, logging, retention enforcement, and monitoring access patterns is essential for regulatory compliance and cost optimization. These practices ensure that sensitive customer data is managed securely and efficiently within Amazon S3.
- A. Correct.
Correct: Enabling S3 Object Lifecycle Policies ensures that data is managed automatically based on its lifecycle stage, such as transitioning to lower-cost storage classes or deleting expired data.
- B. Correct.
Correct: AWS CloudTrail logs provide detailed visibility into access and API usage, allowing you to monitor data access and maintain compliance.
- C. Incorrect.
Incorrect: Storing all data in the S3 Standard storage class indefinitely is not a best practice for data governance, as it can lead to unnecessary costs and fails to address data lifecycle requirements.
- D. Correct.
Correct: S3 Object Lock can be used to enforce retention policies, which is essential for ensuring compliance with data governance regulations for critical data.
- E. Correct.
Correct: Amazon S3 Storage Lens provides insights into bucket-level access patterns, enabling better monitoring and observation as part of a data governance strategy.