SAA-C03 Question 58
Select 2Your company processes sensitive customer data, including personally identifiable information (PII), and stores it in Amazon S3 buckets. You need to ensure that any anomalies in access patterns or unauthorized access attempts to this data are detected and that sensitive information in the S3 buckets is identified and classified automatically. Which combination of AWS services should you use to meet these requirements?
- A
Amazon Macie
- B
Amazon GuardDuty
- C
Amazon Cognito
- D
AWS WAF
- E
Amazon Inspector
Show answer and explanation
Correct answers: A, B
Explanation
To address the requirements, Amazon Macie is used to identify and classify sensitive data, such as PII, in S3 buckets. Amazon GuardDuty complements this by detecting anomalies in access patterns or unauthorized access attempts to the data. Together, they provide robust data security and anomaly detection for sensitive information stored in Amazon S3.
- A. Correct.
Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data, such as PII, in Amazon S3 buckets. It is relevant for identifying and classifying sensitive information.
- B. Correct.
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads. It can detect anomalies in access patterns for data stored in Amazon S3.
- C. Incorrect.
Amazon Cognito is used for user authentication and identity management in web and mobile apps. While it helps manage user access, it does not detect anomalies or classify sensitive data in S3 buckets.
- D. Incorrect.
AWS WAF is used to protect web applications from common web exploits and attacks. It is not relevant to identifying sensitive data or detecting anomalies in S3 access.
- E. Incorrect.
Amazon Inspector is a vulnerability management service that helps improve the security of EC2 instances and container images. It is not designed for anomaly detection or sensitive data classification in S3.