MLS-C01 Question 355
Select 4You are working on a machine learning project in AWS that involves processing sensitive customer data, including personally identifiable information (PII). Your organization requires that this data is anonymized before being shared with a third-party vendor for further analysis. You also need to ensure that the data is encrypted both in transit and at rest. Which combination of AWS services and features would you use to meet these requirements?
- A
Use AWS Key Management Service (KMS) to manage encryption keys and encrypt data at rest in Amazon S3.
- B
Use Amazon Macie to automatically detect and classify PII in the dataset.
- C
Use AWS Glue to tokenize and anonymize sensitive data fields before sharing.
- D
Use AWS Secrets Manager to anonymize the PII in the dataset.
- E
Use AWS Certificate Manager (ACM) to ensure encrypted data transfer over HTTPS.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To meet the requirements of anonymizing sensitive PII data and ensuring encryption at all stages, you can use a combination of AWS services. AWS KMS handles encryption at rest, while ACM ensures encrypted data transfer. Amazon Macie automatically detects sensitive data such as PII, and AWS Glue can preprocess and anonymize the data before sharing it with third parties. AWS Secrets Manager, however, does not provide anonymization capabilities and is unrelated to the scenario.
- A. Correct.
Correct: AWS Key Management Service (KMS) is a secure and scalable solution for managing encryption keys and encrypting data at rest in services like Amazon S3.
- B. Correct.
Correct: Amazon Macie is designed to detect, classify, and protect sensitive data such as PII, making it easier to identify sensitive information in your dataset.
- C. Correct.
Correct: AWS Glue can be used to preprocess and transform datasets, including tokenization or anonymization of sensitive data fields.
- D. Incorrect.
Incorrect: AWS Secrets Manager is a tool for managing secrets like database credentials and API keys, but it is not used for anonymizing PII.
- E. Correct.
Correct: AWS Certificate Manager (ACM) provides SSL/TLS certificates to enable secure data transfer over HTTPS, ensuring encryption in transit.