Amazon Exam SAA-C03 Topic 4 Question 52 Discussion

Actual exam question for Amazon's SAA-C03 exam

Question #: 52
Topic #: 4

How can a company detect and notify security teams about PII in S3 buckets?

AUse Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.

BUse Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SNS notification.

CUse Amazon Macie. Create an EventBridge rule for SensitiveData:S3Object/Personal findings and send an SQS notification.

DUse Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SQS notification.

Show Suggested Answer

Suggested Answer: A

Amazon Macie is purpose-built for detecting PII in S3.

Option A uses EventBridge to filter SensitiveData findings and notify via SNS, meeting the requirements.

Options B and D involve GuardDuty, which is not designed for PII detection.

Option C uses SQS, which is less suitable for immediate notifications.

by Leonora at Dec 07, 2024, 02:07 PM

Limited Time Offer

25%

Off

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Willard

5 months ago

I'm with Luisa on this one. SNS is the way to go. Plus, you can set up some fun emoji-based alerts to really liven up the security team's day.

upvoted 0 times

Vallie

4 months ago

C) Yeah, SNS notifications with emojis would definitely make security alerts more engaging.

upvoted 0 times

...

Lavonda

4 months ago

B) I agree, SNS notifications are quick and easy for the security team to see.

upvoted 0 times

...

Edward

5 months ago

A) Use Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.

upvoted 0 times

...

Luisa

6 months ago

Haha, SQS? Really? Who wants to deal with that mess when you can just get a nice, clean SNS notification? A all the way, baby!

upvoted 0 times

Bernadine

5 months ago

Twana: True, but for PII in S3 buckets, SNS notifications with Amazon Macie seem like the way to go.

upvoted 0 times

...

Twana

5 months ago

User 2: Yeah, SQS can be a bit messy, but some companies might prefer it for certain use cases.

upvoted 0 times

...

Breana

5 months ago

User 1: I agree, SNS notifications are much cleaner and easier to deal with.

upvoted 0 times

...

Earleen

6 months ago

Hmm, I'm not sure about using GuardDuty for this. It's more geared towards general security threats, not PII specifically. I'd go with Macie for this use case.

upvoted 0 times

Agustin

4 months ago

Creating an EventBridge rule for SensitiveData:S3Object/Personal findings with Macie seems like the best approach.

upvoted 0 times

...

Micaela

5 months ago

GuardDuty might not be the best option for detecting PII in S3 buckets.

upvoted 0 times

...

Mariko

5 months ago

I think using Macie with an EventBridge rule for SensitiveData findings is the way to go.

upvoted 0 times

...

Ricki

5 months ago

I agree, Macie is more focused on PII detection.

upvoted 0 times

...

Ardella

6 months ago

I would go with option A as well, it specifically mentions SensitiveData findings.

upvoted 0 times

...

Trinidad

6 months ago

I'm not sure, but I think option C could also work.

upvoted 0 times

...

Annabelle

6 months ago

I agree with Ria, using Amazon Macie seems like the best option.

upvoted 0 times

...

Elvis

6 months ago

I think option A is the way to go. Macie is specifically designed for PII detection, and using EventBridge to trigger an SNS notification seems like a solid approach.

upvoted 0 times