SAA-C03 Question 83
Single answerA financial services company needs to store sensitive customer transaction data in AWS for compliance purposes. The data must be retained for 7 years and classified to meet regulatory requirements. Which solution should you recommend to ensure data retention and classification requirements are met?
- A
Store the data in Amazon S3 with Object Lock enabled in compliance mode and apply S3 bucket policies to control access.
- B
Store the data in Amazon Glacier Deep Archive and manually delete files after 7 years.
- C
Use Amazon RDS with automated snapshots configured to retain backups for 7 years.
- D
Store the data in Amazon DynamoDB with Time to Live (TTL) set to automatically delete records after 7 years.
Show answer and explanation
Correct answer: A
Explanation
To meet both data retention and classification requirements for compliance, Amazon S3 with Object Lock in compliance mode is the best solution. It ensures that data cannot be altered or deleted during the specified retention period. Additionally, S3 bucket policies can enforce strict access controls to support classification needs, making this solution suitable for sensitive financial data.
- A. Correct.
This is the correct answer. Amazon S3 with Object Lock in compliance mode ensures that objects cannot be deleted or overwritten during the retention period. S3 bucket policies can enforce access controls, meeting both retention and classification requirements.
- B. Incorrect.
Amazon Glacier Deep Archive is cost-effective for long-term storage, but it does not enforce compliance requirements like retention locks. Also, manual deletion does not guarantee regulatory compliance.
- C. Incorrect.
Amazon RDS snapshots are suitable for database backups but are not designed to classify or enforce compliance retention policies. They also lack native mechanisms for classification of data.
- D. Incorrect.
Amazon DynamoDB’s TTL feature is useful for automatically expiring records, but it does not provide compliance guarantees or support for data classification.