SAA-C03 Q702 · Security

Question

A company manages millions of documents in hundreds of Amazon S3 buckets in multiple AWS Regions. The company must determine whether any of the S3 buckets contain personally identifiable information (PII). Which solution will meet this requirement with the LEAST operational overhead?

Accepted Answer

**Amazon Macie** is a fully managed data security and data privacy service that uses **machine learning and pattern matching** to discover and protect sensitive data in Amazon S3. Here's why it perfectly meets the requirements:

1. **PII Detection**: Macie is purpose-built to identify sensitive data types including PII (names, addresses, credit card numbers, SSNs, etc.). It uses managed data identifiers and custom data identifiers to classify data.

2. **Multi-bucket, Multi-Region support**: Macie can be enabled across multiple AWS Regions and can scan hundreds of S3 buckets. You can configure automated sensitive data discovery or create targeted discovery jobs across all your buckets.

3. **Least operational overhead**: As a fully managed service, Macie requires no custom code, no infrast

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips