SAA-C03 Q227 · Security

Question

How can a company detect and notify security teams about PII in S3 buckets?

Accepted Answer

**Option A is correct** because it combines the right service with the right notification mechanism:

1. **Amazon Macie** is purpose-built for discovering and protecting sensitive data (like PII) stored in Amazon S3. It uses machine learning and pattern matching to automatically identify sensitive data types such as names, credit card numbers, social security numbers, etc.

2. **EventBridge rule for SensitiveData findings**: When Macie discovers PII, it generates findings categorized under the `SensitiveData` finding type. EventBridge can capture these findings and trigger downstream actions. The `SensitiveData` category is the correct broad finding type that encompasses all PII-related discoveries.

3. **SNS notification**: Amazon SNS (Simple Notification Service) is the appropriate servi

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips