SCS-C02 Question 476
Select 2Your company stores sensitive financial data in Amazon S3. To meet compliance requirements, you need to classify this data to identify any Personally Identifiable Information (PII) or financial details. Which combination of AWS services can you use to automate the data classification process and ensure compliance?
- A
Amazon Macie
- B
AWS Config
- C
AWS Glue
- D
Amazon Inspector
- E
AWS Lambda
- F
Amazon S3 Object Tags
Show answer and explanation
Correct answers: A, F
Explanation
To classify sensitive data stored in S3, Amazon Macie is the primary service for identifying PII and financial details using advanced machine learning. After Macie identifies and classifies the data, Amazon S3 Object Tags can be used to label and organize the data for further management and compliance purposes. The other services listed do not directly contribute to the automated classification of sensitive data in this scenario.
- A. Correct.
Amazon Macie uses machine learning and pattern matching to automatically discover, classify, and protect sensitive data in Amazon S3, making it a critical service for data classification tasks.
- B. Incorrect.
AWS Config is primarily used for tracking configuration changes and compliance of AWS resources, but it does not perform data classification.
- C. Incorrect.
AWS Glue is an ETL (Extract, Transform, Load) service used for preparing and transforming data for analytics. It is not designed for data classification tasks.
- D. Incorrect.
Amazon Inspector is a security assessment service that identifies vulnerabilities in EC2 instances and container workloads. It does not perform data classification for S3 data.
- E. Incorrect.
AWS Lambda is a compute service for running code in response to events, but it does not inherently perform data classification. It could be used alongside other services, but not as a standalone solution.
- F. Correct.
Amazon S3 Object Tags can be applied to classify objects based on metadata after analysis by services like Amazon Macie. Tags help organize and manage sensitive data, making it part of the solution.