SAA-C03 Q158 · Security

Question

An ecommerce company stores terabytes of customer data in the AWS Cloud. The data contains personally identifiable information (PII). The company wants to use the data in three applications. Only one of the applications needs to process the PII. The PII must be removed before the other two applications process the data. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

**Answer B: S3 Object Lambda** meets all requirements with the least operational overhead:

1. **Single data source**: The original data (including PII) is stored in ONE S3 bucket — no data duplication needed.

2. **Dynamic transformation**: S3 Object Lambda lets you attach an AWS Lambda function to an S3 Access Point. When the two non-PII applications request data, the Lambda function automatically intercepts the GET request, strips the PII, and returns the sanitized data.

3. **PII application unaffected**: The application that needs PII accesses the original S3 bucket directly (or through a standard Access Point), receiving the full unmodified data.

4. **Least operational overhead**: 
   - No need to maintain duplicate datasets
   - No need to build or manage a proxy layer
   - No sync

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips