Automated PII Discovery in S3 with Amazon Macie
Short answer
A Configure Amazon Macie to automatically discover and classify PII in S3 buckets using machine learning, requiring no custom code.
Question
Key Takeaways
The key insight is recognizing that Amazon Macie is the native AWS service specifically designed for automated classification and discovery of sensitive data like PII, eliminating the need for custom code or manual inspection.
This question tests automated sensitive data discovery for PII protection in Amazon S3 using Amazon Macie. The solution leverages Macie's machine learning capabilities to identify PII with minimal manual effort.
Common mistake: Many candidates might choose Lambda or Athena because they are familiar with them, but these require significant manual development and maintenance, violating the 'least manual intervention' requirement.
Expert Analysis
Why the Answer Is Correct
Amazon Macie is an intelligent security service that uses machine learning and pattern matching to automatically discover and classify sensitive data, such as PII, stored in Amazon S3. By configuring Macie to access the S3 bucket, it continuously scans objects and provides automated alerts or reports when PII is detected. This directly addresses the requirement to determine if a dataset contains PII before sharing it, with the least amount of manual intervention compared to building custom solutions.
Why the Other Options Are Wrong
Option B (CloudTrail) monitors API calls, not the content of the data itself, so it cannot identify PII within objects. Option C (Lambda) would require writing and maintaining custom code to scan and classify data, which involves significant manual intervention and ongoing updates. Option D (Glue/Athena) also requires defining schemas and writing custom SQL queries to detect patterns, which is more labor-intensive than Macie's out-of-the-box classification.
Community Comment Notes
The community consensus strongly supports option A, with multiple commenters noting that "PII -> Macie" is a standard association. Users highlighted that Macie is designed for automated sensitive data discovery, classifying, and protection without the need for manual inspection or custom functions. One user noted that Macie uses machine learning and pattern matching to automatically alert on PII, confirming its suitability for this scenario.
Exam Strategy
When asked about automated PII detection or sensitive data discovery in AWS, immediately consider Amazon Macie. It is the managed service built specifically for this purpose, minimizing operational overhead compared to custom Lambda or Glue solutions.
Frequently Asked Questions
Why not use Lambda for PII scanning?
Can CloudTrail detect PII content?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
kupo777 👍 2Correct Answer: A Amazon Macie is designed for automated sensitive data discovery, classification, and protection. It can scan your S3 buckets to identify and classify PII using machine learning and pattern matching, which means you don't need to manually inspect data or write custom functions. By configuring Macie to access the S3 bucket, it will continuously monitor and automatically alert you to any PII detected, significantly reducing the need for manual intervention.
-
MerryLew 👍 1 Answered AMacie is a great option for PII discovery.
-
michele_scar 👍 2 Answered APII -> Macie
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All DEA-C01 Questions
Access 100 questions with complete answers and detailed explanations.
View Full DEA-C01 Practice Test →