SCS-C02 Question 478
Single answerYour organization wants to classify sensitive data stored in Amazon S3 buckets and ensure compliance with regulatory requirements. You need to automatically identify and categorize sensitive information such as Personally Identifiable Information (PII) or financial data across all S3 buckets. Which AWS service or feature should you use to achieve this?
- A
Amazon Macie
- B
AWS Config
- C
AWS Trusted Advisor
- D
Amazon Inspector
Show answer and explanation
Correct answer: A
Explanation
Amazon Macie is the correct choice because it is a fully managed service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS, particularly data stored in Amazon S3. It helps organizations meet compliance requirements by identifying PII or financial data and providing actionable insights. Other options like AWS Config, Trusted Advisor, and Amazon Inspector have different use cases and cannot automatically classify sensitive data in S3 buckets.
- A. Correct.
Amazon Macie is specifically designed to classify and secure sensitive data in AWS, such as scanning S3 buckets for PII and financial information. It uses machine learning and pattern matching to identify sensitive data and provides detailed reporting.
- B. Incorrect.
AWS Config is used for tracking configuration changes and compliance in your AWS environment, but it does not classify or scan data in S3 buckets for sensitive content.
- C. Incorrect.
AWS Trusted Advisor provides insights and recommendations for cost optimization, performance, security, and fault tolerance, but it does not perform data classification or scan for sensitive information.
- D. Incorrect.
Amazon Inspector is used for assessing security vulnerabilities in Amazon EC2 instances and container images, but it does not classify or scan S3 data for sensitive content.