SAA-C03 Q11 · Security

Question

A company is enhancing the security of its AWS environment, where the company stores a significant amount of sensitive customer data. The company needs a solution that automatically identifies and classifies sensitive data that is stored in multiple Amazon S3 buckets. The solution must automatically respond to data breaches and alert the company's security team through email immediately when noncompliant data is found. Which solution will meet these requirements?

Accepted Answer

Option C meets every requirement:

1. **Automatically identifies and classifies sensitive data in S3**: Amazon Macie is purpose-built for this. It uses machine learning and pattern matching to discover, classify, and protect sensitive data (PII, financial data, credentials, etc.) stored in Amazon S3 buckets.

2. **Automatically responds to data breaches**: Macie generates findings when it detects sensitive data exposure, policy violations, or noncompliant data. These findings are events that can trigger automated responses.

3. **Alerts the security team via email immediately**: Macie natively integrates with Amazon EventBridge. EventBridge rules can route Macie findings directly to an SNS topic. SNS supports email subscriptions, providing **immediate** push-based notifications to the secu

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips