AWS Certified Data Engineer Associate DEA-C01 Practice Question
Your data engineering team stores application logs in an Amazon S3 bucket that receives thousands of new objects daily. Compliance requires automatically detecting any newly ingested file that contains credit card numbers and notifying engineers by email within minutes. The solution must be fully managed, involve no code in the pipeline, and minimize operational overhead. Which solution meets these requirements?
Configure an S3 event notification that invokes an AWS Lambda function. The function downloads each new object, scans it with a regex for credit card patterns, and publishes a message to Amazon SNS when a match is found.
Enable Amazon GuardDuty for the account and create a CloudWatch Logs metric filter that searches for credit card patterns, then configure the metric alarm to trigger an Amazon SNS notification.
Enable Amazon Macie for the bucket and create a sensitive data discovery job. Add an Amazon EventBridge rule that matches the finding type "SensitiveData:S3Object/Financial" and publishes the event to an Amazon SNS topic that emails the engineers.
Run an AWS Glue crawler to catalog the bucket and schedule an AWS Glue DataBrew profile job that applies regex rules to detect credit card numbers, then use the job completion event to publish a message to Amazon SNS.
Amazon Macie is a fully managed service that automatically classifies and discovers sensitive data in Amazon S3. When a discovery job detects credit-card data, Macie generates a finding of type "SensitiveData:S3Object/Financial" and publishes it to Amazon EventBridge. An EventBridge rule can forward matching findings to an Amazon SNS topic, which sends email notifications. This requires no changes to the ingestion pipeline and little ongoing administration.
Glue DataBrew (choice B) and a custom Lambda regex scan (choice C) require building and maintaining jobs or code, adding operational burden. GuardDuty with CloudWatch Logs (choice D) does not inspect S3 objects for credit-card data, so it cannot satisfy the requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Amazon Macie and how does it help with compliance?
Open an interactive chat with Bash
How does Amazon EventBridge work in this solution?
Open an interactive chat with Bash
What are the advantages of using Amazon SNS for notifications in this setup?
Open an interactive chat with Bash
AWS Certified Data Engineer Associate DEA-C01
Data Operations and Support
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .