MENU
How can a company detect and notify security teams about PII in S3 buckets?
Suggested Answer: A
Get Premium SAA-C03 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Amazon Macie is purpose-built for detecting PII in S3.
Option A uses EventBridge to filter SensitiveData findings and notify via SNS, meeting the requirements.
Options B and D involve GuardDuty, which is not designed for PII detection.
Option C uses SQS, which is less suitable for immediate notifications.
36 comments · newest first
LA
Laura
11 months ago
I’m surprised there’s no mention of manual checks!
LU
Ludivina
11 months ago
Wait, can GuardDuty even detect PII? That seems off.
DE
Deonna
11 months ago
C is a solid choice, but I prefer A for better accuracy.
AB
Abel
11 months ago
I think B could work too, but Macie is more focused on PII.
CA
Carmela
12 months ago
Definitely A! Amazon Macie is perfect for PII detection.
MI
Miss
12 months ago
I’m leaning towards option A too, but I remember there was some confusion about whether to use SNS or SQS for notifications. I hope I get that part right!
KA
Karina
1 year ago
I think option C is close, but I remember that Macie should be paired with EventBridge for notifications. I just can't recall if it was SQS or SNS.
ER
Erick
1 year ago
I feel like GuardDuty is more about threat detection rather than PII specifically. I might be mixing it up with another practice question we did.
LE
Leonor
1 year ago
I remember studying about Amazon Macie and its ability to detect PII in S3 buckets. I think option A sounds right, but I'm not entirely sure about the EventBridge rule specifics.
YU
Yun
1 year ago
This is a great question to test our knowledge of AWS security services. I'm confident I can apply the right combination of tools to solve this problem.
KA
Karma
1 year ago
I'm not super familiar with EventBridge or SNS, so I'll need to make sure I understand how to set those up correctly. But I think I can work through this step-by-step.
NI
Nichelle
1 year ago
Okay, I've got this. The answer is clearly A - use Macie to detect the sensitive data, create an EventBridge rule, and send an SNS notification to the security team.
PA
Pamella
1 year ago
Hmm, I'm a bit unsure about the differences between Macie and GuardDuty. I'll need to review the details of each service to figure out the best approach.
KI
Kiera
1 year ago
This looks like a straightforward question about detecting PII in S3 buckets. I think the key is to use the right AWS service for the job.
WI
Willard
2 years ago
I'm with Luisa on this one. SNS is the way to go. Plus, you can set up some fun emoji-based alerts to really liven up the security team's day.
VA
Vallie
2 years ago
C) Yeah, SNS notifications with emojis would definitely make security alerts more engaging.
LA
Lavonda
2 years ago
B) I agree, SNS notifications are quick and easy for the security team to see.
ED
Edward
2 years ago
A) Use Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.
LU
Luisa
2 years ago
Haha, SQS? Really? Who wants to deal with that mess when you can just get a nice, clean SNS notification? A all the way, baby!
BE
Bernadine
2 years ago
Twana: True, but for PII in S3 buckets, SNS notifications with Amazon Macie seem like the way to go.
TW
Twana
2 years ago
User 2: Yeah, SQS can be a bit messy, but some companies might prefer it for certain use cases.
BR
Breana
2 years ago
User 1: I agree, SNS notifications are much cleaner and easier to deal with.
EA
Earleen
2 years ago
Hmm, I'm not sure about using GuardDuty for this. It's more geared towards general security threats, not PII specifically. I'd go with Macie for this use case.
AG
Agustin
2 years ago
Creating an EventBridge rule for SensitiveData:S3Object/Personal findings with Macie seems like the best approach.
MI
Micaela
2 years ago
GuardDuty might not be the best option for detecting PII in S3 buckets.
MA
Mariko
2 years ago
I think using Macie with an EventBridge rule for SensitiveData findings is the way to go.
RI
Ricki
2 years ago
I agree, Macie is more focused on PII detection.
AR
Ardella
2 years ago
I would go with option A as well, it specifically mentions SensitiveData findings.
TR
Trinidad
2 years ago
I'm not sure, but I think option C could also work.
AN
Annabelle
2 years ago
I agree with Ria, using Amazon Macie seems like the best option.
EL
Elvis
2 years ago
I think option A is the way to go. Macie is specifically designed for PII detection, and using EventBridge to trigger an SNS notification seems like a solid approach.
GL
Glenn
2 years ago
User 4: Option A seems like the most direct way to detect and notify about PII in S3 buckets. Macie is a good choice for this.
ON
Oneida
2 years ago
User 3: Using Amazon GuardDuty with EventBridge rule for CRITICAL findings could also work well for notifying security teams.
NO
Nobuko
2 years ago
User 2: Yeah, Macie is great for PII detection. Sending an SNS notification will alert the security team quickly.
PE
Peggie
2 years ago
User 1: I agree, option A with Amazon Macie and EventBridge rule for SensitiveData findings sounds effective.
RI
Ria
2 years ago
I think the answer is A.