DEA-C01 Question 532
Select 3You are tasked with designing a data pipeline on AWS that processes sensitive customer information, including Personally Identifiable Information (PII). The organization requires compliance with data privacy regulations such as GDPR. Which of the following actions should you take to ensure compliance with data privacy and governance requirements?
- A
Use AWS Glue Data Catalog to tag datasets containing PII and enforce access control using Lake Formation.
- B
Encrypt sensitive data at rest using AWS Key Management Service (KMS) with customer-managed keys.
- C
Enable Amazon S3 Transfer Acceleration to speed up data transfers for sensitive data.
- D
Implement fine-grained access control policies in Amazon S3 to restrict access to datasets containing PII.
- E
Disable logging on AWS services to reduce the risk of exposing sensitive information in logs.
Show answer and explanation
Correct answers: A, B, D
Explanation
Ensuring compliance with data privacy and governance regulations, such as GDPR, requires implementing mechanisms to tag and classify sensitive data, encrypting data at rest, and enforcing strict access controls. AWS services like AWS Glue Data Catalog, AWS KMS, and Amazon S3 provide the tools to achieve these requirements. However, actions like disabling logging or focusing solely on transfer speed do not address privacy or governance concerns.
- A. Correct.
Using AWS Glue Data Catalog and AWS Lake Formation allows you to tag and classify datasets containing PII. This enables you to enforce access control policies, ensuring only authorized users can access sensitive data.
- B. Correct.
Encrypting sensitive data at rest using AWS KMS with customer-managed keys is a best practice for ensuring data privacy and meeting compliance requirements like GDPR.
- C. Incorrect.
While Amazon S3 Transfer Acceleration improves data transfer speed, it does not directly address data privacy or governance requirements.
- D. Correct.
Fine-grained access control policies in Amazon S3 ensure that only authorized users can access sensitive datasets, which is critical for complying with data privacy regulations.
- E. Incorrect.
Disabling logging is not recommended as it eliminates the ability to audit and monitor data access and operations, which is essential for governance and compliance.