New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon-DEA-C01 Exam - Topic 4 Question 6 Discussion

Actual exam question for Amazon's Amazon-DEA-C01 exam
Question #: 6
Topic #: 4
[All Amazon-DEA-C01 Questions]

A company saves customer data to an Amazon S3 bucket. The company uses server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the bucket. The dataset includes personally identifiable information (PII) such as social security numbers and account details.

Data that is tagged as PII must be masked before the company uses customer data for analysis. Some users must have secure access to the PII data during the preprocessing phase. The company needs a low-maintenance solution to mask and secure the PII data throughout the entire engineering pipeline.

Which combination of solutions will meet these requirements? (Select TWO.)

Show Suggested Answer Hide Answer
Suggested Answer: A, D

To address the requirement of masking PII data and ensuring secure access throughout the data pipeline, the combination of AWS Glue DataBrew and IAM provides a low-maintenance solution.

A . AWS Glue DataBrew for Masking:

AWS Glue DataBrew provides a visual tool to perform data transformations, including masking PII data. It allows for easy configuration of data transformation tasks without requiring manual coding, making it ideal for this use case.


D . AWS Identity and Access Management (IAM):

Using IAM policies allows fine-grained control over access to PII data, ensuring that only authorized users can view or process sensitive data during the pipeline stages.

Alternatives Considered:

B (Amazon GuardDuty): GuardDuty is for threat detection and does not handle data masking or access control for PII.

C (Amazon Macie): Macie can help discover sensitive data but does not handle the masking of PII or access control.

E (Custom scripts): Custom scripting increases the operational burden compared to a built-in solution like DataBrew.

AWS Glue DataBrew for Data Masking

IAM Policies for PII Access Control

by Susana at Oct 23, 2024, 08:51 PM

Limited Time Offer

25%

Off

Get Premium Amazon-DEA-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Joanna
3 months ago
Wait, can you really use AWS Glue for masking? That’s surprising!
upvoted 0 times
...
Gregoria
3 months ago
B is great for monitoring, but is it really necessary?
upvoted 0 times
...
Tashia
3 months ago
Not sure about E, seems too manual for a low-maintenance solution.
upvoted 0 times
...
Frederick
4 months ago
A sounds good for ETL and masking.
upvoted 0 times
...
Louis
4 months ago
I think D is a must for managing access!
upvoted 0 times
...
Colette
4 months ago
GuardDuty sounds useful for monitoring, but I’m not convinced it directly helps with masking the data. I’m leaning towards A and D.
upvoted 0 times
...
Leatha
4 months ago
I think we practiced a question similar to this, and using custom scripts for masking could be risky. Maybe option E isn't the best choice?
upvoted 0 times
...
Trinidad
4 months ago
I'm not entirely sure, but I feel like IAM is essential for managing access to sensitive data, so option D seems right.
upvoted 0 times
...
Wilford
5 months ago
I remember we discussed using AWS Glue DataBrew for ETL tasks, so I think option A could be a good choice for masking the PII data.
upvoted 0 times
...
Roosevelt
5 months ago
This seems straightforward enough. I'll go with the AWS Glue DataBrew and IAM options - that should give us the data masking and secure access we need.
upvoted 0 times
...
Barney
5 months ago
Okay, I've got a strategy. I'll focus on the data masking with AWS Glue DataBrew and the access control with IAM. That should cover the key requirements.
upvoted 0 times
...
Caprice
5 months ago
I'm a bit confused by the options. I'll need to review the details on each of these services to figure out the best approach.
upvoted 0 times
...
Lai
5 months ago
Hmm, I think I see a couple of good options here. AWS Glue DataBrew and IAM access control seem like they could be a solid combination.
upvoted 0 times
...
Hyman
5 months ago
This looks like a tricky one. I'll need to carefully consider the requirements around data masking, secure access, and low-maintenance solutions.
upvoted 0 times
...
Zona
1 year ago
Hey, don't forget the dad joke! What do you call a fish wearing a bowtie? Sofishticated!
upvoted 0 times
Joanna
1 year ago
A: Haha, that's a good one! Sofishticated!
upvoted 0 times
...
Clarinda
1 year ago
B: D) Use AWS Identity and Access Management (IAM) to manage permissions and to control access to the PII data.
upvoted 0 times
...
Shalon
1 year ago
A: A) Use AWS Glue DataBrew to perform extract, transform, and load (ETL) tasks that mask the PII data before analysis.
upvoted 0 times
...
...
Earnestine
1 year ago
Writing custom scripts? That sounds like a lot of work. I'd rather go with the AWS services that are designed for this kind of thing, like Glue DataBrew and IAM.
upvoted 0 times
...
Raylene
1 year ago
Amazon Macie discovery job? Nah, that's not what we need here. The focus should be on masking the PII data and controlling access, not just discovering it.
upvoted 0 times
Miesha
1 year ago
C: Write custom scripts in an application to mask the PII data and to control access.
upvoted 0 times
...
Marta
1 year ago
B: D) Use AWS Identity and Access Management (IAM) to manage permissions and to control access to the PII data.
upvoted 0 times
...
Odette
1 year ago
A: Use AWS Glue DataBrew to perform extract, transform, and load (ETL) tasks that mask the PII data before analysis.
upvoted 0 times
...
...
Art
1 year ago
I like the idea of using GuardDuty to monitor the PII data access. Might be a good complement to the Glue DataBrew and IAM approach.
upvoted 0 times
Nobuko
1 year ago
D: Using a combination of Glue DataBrew, IAM, and GuardDuty sounds like a solid solution.
upvoted 0 times
...
Desiree
1 year ago
C: GuardDuty can definitely help monitor access to the PII data.
upvoted 0 times
...
Annabelle
1 year ago
C: We should definitely consider combining GuardDuty with Glue DataBrew and IAM for a comprehensive solution.
upvoted 0 times
...
Alyce
1 year ago
B: Using Glue DataBrew for ETL tasks and IAM for access control sounds like a solid plan.
upvoted 0 times
...
Mozell
1 year ago
B: Yeah, and combining it with IAM for access control makes sense.
upvoted 0 times
...
Cornell
1 year ago
A: I agree, GuardDuty can help monitor access patterns for the PII data.
upvoted 0 times
...
Chara
1 year ago
A: I think using Glue DataBrew for ETL tasks is a good idea.
upvoted 0 times
...
...
Teddy
1 year ago
A and D seem like the way to go. Glue DataBrew for the ETL and masking, and IAM for access control. Keeps things simple and secure.
upvoted 0 times
Penney
1 year ago
Monitoring access patterns with GuardDuty can also help ensure the security of the PII data.
upvoted 0 times
...
Tanja
1 year ago
Custom scripts might work, but using AWS services like Glue DataBrew and IAM is more efficient.
upvoted 0 times
...
Regenia
1 year ago
It's important to have a secure solution in place for masking and controlling access to PII data.
upvoted 0 times
...
Marion
1 year ago
I agree, using Glue DataBrew for ETL tasks and IAM for access control is a good combination.
upvoted 0 times
...
Rosalia
1 year ago
D) Use AWS Identity and Access Management (IAM) to manage permissions and to control access to the PII data.
upvoted 0 times
...
Chantell
1 year ago
A) Use AWS Glue DataBrew to perform extract, transform, and load (ETL) tasks that mask the PII data before analysis.
upvoted 0 times
...
...
Marya
1 year ago
I agree, it's a low-maintenance solution that meets the requirements.
upvoted 0 times
...
Junita
1 year ago
I think we should use AWS Glue DataBrew to mask the PII data.
upvoted 0 times
...

Save Cancel