AWS Service to Identify and Protect Sensitive Data in S3
A company wants to use a managed service to identify and protect sensitive data that is stored in Amazon S3. Which AWS service will meet these requirements?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests knowledge of AWS security services, specifically distinguishing between general threat detection (GuardDuty) and data classification/protection (Macie). The common trap is selecting GuardDuty or Inspector, which do not focus on PII or sensitive content analysis within S3 buckets.
Amazon Macie is the correct AWS managed service for identifying and protecting sensitive data stored in Amazon S3 using machine learning.
Candidates often choose Amazon GuardDuty because it is a well-known security service, but GuardDuty focuses on threat hunting and unusual activity detection rather than classifying or protecting specific sensitive data types like PII in S3.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Amazon Macie is a fully managed security service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS. It automatically discovers, classifies, and protects sensitive data stored in Amazon S3, making it the ideal choice for this scenario. Macie helps organizations meet regulatory compliance requirements by providing insights into where sensitive data resides and ensuring it is protected.Why the Other Options Are Wrong
AWS IAM Access Analyzer helps identify resources shared with external entities, not sensitive data content. Amazon GuardDuty detects threats like unauthorized access or malicious instances but does not classify or protect data content itself. Amazon Inspector automates software vulnerability management on EC2 instances and containers, focusing on OS/application vulnerabilities rather than data protection in S3.Community Comment Notes
The community consensus strongly supports Amazon Macie as the correct answer. Users highlight that Macie is specifically designed for discovering and protecting sensitive data in S3. One commenter noted "Amazon Macie manage sensitive data in S3," reinforcing its core function. Another user emphasized that Macie uses machine learning to automatically discover and classify PII, aligning perfectly with the question's requirements.Exam Strategy
When asked about 'identifying and protecting sensitive data' in S3, immediately think of Amazon Macie. Do not confuse it with GuardDuty (threat detection) or Inspector (vulnerability scanning). Focus on keywords like 'sensitive data', 'PII', and 'classification' to select Macie.
Frequently Asked Questions
Why is Amazon GuardDuty not the correct answer?
GuardDuty detects threats and anomalies but does not classify or protect sensitive data content like PII in S3 buckets.
What is the primary function of Amazon Macie?
Macie uses ML to discover, classify, and protect sensitive data in S3, helping ensure compliance and data security.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →