MLS-C01 Question 353
Select 3A healthcare organization is building a machine learning model on AWS to predict patient readmission rates. To comply with HIPAA regulations, they must ensure that the data used for training is anonymized and encrypted both in transit and at rest. Which combination of AWS services and features will best achieve this goal?
- A
Use AWS Key Management Service (KMS) to manage encryption keys and enable server-side encryption for data stored in Amazon S3.
- B
Apply the Amazon S3 Object Lock feature to prevent unauthorized access to data during model training.
- C
Use AWS Glue DataBrew to apply data masking techniques to sensitive fields in the dataset.
- D
Enable Amazon S3 Transfer Acceleration to encrypt data during transfer.
- E
Use AWS Identity and Access Management (IAM) policies to restrict access to the dataset.
Show answer and explanation
Correct answers: A, C, E
Explanation
To comply with HIPAA regulations, the organization must anonymize the data and secure it both in transit and at rest. AWS KMS ensures encryption at rest, while IAM policies control access to sensitive data. Additionally, AWS Glue DataBrew can anonymize data by applying data masking techniques. These combined approaches address the need for both encryption and anonymization.
- A. Correct.
Correct. AWS Key Management Service (KMS) is used to manage encryption keys, and enabling server-side encryption in Amazon S3 ensures the data is encrypted at rest.
- B. Incorrect.
Incorrect. While S3 Object Lock is useful for write-once-read-many (WORM) compliance, it does not encrypt or anonymize data.
- C. Correct.
Correct. AWS Glue DataBrew can be used to apply data masking techniques, which anonymize sensitive fields in the dataset.
- D. Incorrect.
Incorrect. Amazon S3 Transfer Acceleration improves data transfer speed but does not guarantee encryption during transfer. Instead, AWS uses HTTPS for encryption in transit.
- E. Correct.
Correct. AWS Identity and Access Management (IAM) policies are essential to restrict access to sensitive data, ensuring only authorized users can access the dataset.