Amazon SAA-C03 Exam - Topic 4 Question 52 Discussion

Actual exam question for Amazon's SAA-C03 exam

Question #: 52
Topic #: 4

How can a company detect and notify security teams about PII in S3 buckets?

AUse Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.

BUse Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SNS notification.

CUse Amazon Macie. Create an EventBridge rule for SensitiveData:S3Object/Personal findings and send an SQS notification.

DUse Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SQS notification.

Show Suggested Answer

Suggested Answer: A

Amazon Macie is purpose-built for detecting PII in S3.

Option A uses EventBridge to filter SensitiveData findings and notify via SNS, meeting the requirements.

Options B and D involve GuardDuty, which is not designed for PII detection.

Option C uses SQS, which is less suitable for immediate notifications.

by Leonora at Dec 07, 2024, 02:07 PM

Limited Time Offer

25%

Off

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Laura

3 months ago

I’m surprised there’s no mention of manual checks!

upvoted 0 times

...

Ludivina

3 months ago

Wait, can GuardDuty even detect PII? That seems off.

upvoted 0 times

...

Deonna

3 months ago

C is a solid choice, but I prefer A for better accuracy.

upvoted 0 times

...

Abel

4 months ago

I think B could work too, but Macie is more focused on PII.

upvoted 0 times

...

Carmela

4 months ago

Definitely A! Amazon Macie is perfect for PII detection.

upvoted 0 times

...

Miss

4 months ago

I’m leaning towards option A too, but I remember there was some confusion about whether to use SNS or SQS for notifications. I hope I get that part right!

upvoted 0 times

...

Karina

4 months ago

I think option C is close, but I remember that Macie should be paired with EventBridge for notifications. I just can't recall if it was SQS or SNS.

upvoted 0 times

...

Erick

4 months ago

I feel like GuardDuty is more about threat detection rather than PII specifically. I might be mixing it up with another practice question we did.

upvoted 0 times

...

Leonor

5 months ago

I remember studying about Amazon Macie and its ability to detect PII in S3 buckets. I think option A sounds right, but I'm not entirely sure about the EventBridge rule specifics.

upvoted 0 times

...

Yun

5 months ago

This is a great question to test our knowledge of AWS security services. I'm confident I can apply the right combination of tools to solve this problem.

upvoted 0 times

...

Karma

5 months ago

I'm not super familiar with EventBridge or SNS, so I'll need to make sure I understand how to set those up correctly. But I think I can work through this step-by-step.

upvoted 0 times

...

Nichelle

5 months ago

Okay, I've got this. The answer is clearly A - use Macie to detect the sensitive data, create an EventBridge rule, and send an SNS notification to the security team.

upvoted 0 times

...

Pamella

5 months ago

Hmm, I'm a bit unsure about the differences between Macie and GuardDuty. I'll need to review the details of each service to figure out the best approach.

upvoted 0 times

...

Kiera

5 months ago

This looks like a straightforward question about detecting PII in S3 buckets. I think the key is to use the right AWS service for the job.

upvoted 0 times

...

Willard

1 year ago

I'm with Luisa on this one. SNS is the way to go. Plus, you can set up some fun emoji-based alerts to really liven up the security team's day.

upvoted 0 times

Vallie

1 year ago

C) Yeah, SNS notifications with emojis would definitely make security alerts more engaging.

upvoted 0 times

...

Lavonda

1 year ago

B) I agree, SNS notifications are quick and easy for the security team to see.

upvoted 0 times

...

Edward

1 year ago

A) Use Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.

upvoted 0 times

...

Luisa

1 year ago

Haha, SQS? Really? Who wants to deal with that mess when you can just get a nice, clean SNS notification? A all the way, baby!

upvoted 0 times

Bernadine

1 year ago

Twana: True, but for PII in S3 buckets, SNS notifications with Amazon Macie seem like the way to go.

upvoted 0 times

...

Twana

1 year ago

User 2: Yeah, SQS can be a bit messy, but some companies might prefer it for certain use cases.

upvoted 0 times

...

Breana

1 year ago

User 1: I agree, SNS notifications are much cleaner and easier to deal with.

upvoted 0 times

...

Earleen

1 year ago

Hmm, I'm not sure about using GuardDuty for this. It's more geared towards general security threats, not PII specifically. I'd go with Macie for this use case.

upvoted 0 times

Agustin

1 year ago

Creating an EventBridge rule for SensitiveData:S3Object/Personal findings with Macie seems like the best approach.

upvoted 0 times

...

Micaela

1 year ago

GuardDuty might not be the best option for detecting PII in S3 buckets.

upvoted 0 times

...

Mariko

1 year ago

I think using Macie with an EventBridge rule for SensitiveData findings is the way to go.

upvoted 0 times

...

Ricki

1 year ago

I agree, Macie is more focused on PII detection.

upvoted 0 times

...

Ardella

1 year ago

I would go with option A as well, it specifically mentions SensitiveData findings.

upvoted 0 times

...

Trinidad

1 year ago

I'm not sure, but I think option C could also work.

upvoted 0 times

...

Annabelle

1 year ago

I agree with Ria, using Amazon Macie seems like the best option.

upvoted 0 times

...

Elvis

1 year ago

I think option A is the way to go. Macie is specifically designed for PII detection, and using EventBridge to trigger an SNS notification seems like a solid approach.

upvoted 0 times