Topic 1 Question 230
A security engineer needs to implement a solution to identify any sensitive data that is stored in an Amazon S3 bucket. The solution must report on sensitive data in the S3 bucket by using an existing Amazon Simple Notification Service (Amazon SNS) topic.
Which solution will meet these requirements with the LEAST implementation effort?
Enable AWS Config. Configure AWS Config to monitor for sensitive data in the S3 bucket and to send notifications to the SNS topic.
Create an AWS Lambda function to scan the S3 bucket for sensitive data that matches a pattern. Program the Lambda function to send notifications to the SNS topic.
Configure Amazon Macie to use managed data identifiers to identify and categorize sensitive data. Create an Amazon EventBridge rule to send notifications to the SNS topic.
Enable Amazon GuardDuty. Configure AWS CloudTrail S3 data events. Create an Amazon CloudWatch alarm that reacts to GuardDuty findings and sends notifications to the SNS topic.
ユーザの投票
コメント(2)
C is the correct answer.
👍 2debarshi2024/11/18- 正解だと思う選択肢: C
The correct answer is C.
Amazon Macie is designed specifically for automated discovery and classification of sensitive data in Amazon S3 using managed data identifiers. It can identify PII, financial data, and credentials with minimal setup. Macie findings can be integrated with Amazon EventBridge, which can send alerts to an SNS topic for notifications.
This option requires the least implementation effort because: ✅ Macie is a fully managed service – No custom scripting or manual configuration needed. ✅ Uses built-in managed data identifiers – No need to define custom regex patterns. ✅ Seamless EventBridge integration – Automatically triggers notifications. ✅ Scales automatically across S3 buckets and objects.
👍 1AWSLoverLoverLoverLoverLover2025/02/19
シャッフルモード