A company saves customer data to an Amazon S3 bucket.

[Reference: AWS Glue DataBrew, D. AWS Identity and Access Management (IAM):, Using IAM policies allows fine-grained control over access to PII data, ensuring that only authorized users can view or process sensitive data during the pipeline stages., Reference: AWS IAM Best Practices, Alternatives Considered:, B (Amazon GuardDuty): GuardDuty is for threat detection and does not handle data masking or access control for PII., C (Amazon Macie): Macie can help discover sensitive data but does not handle the masking of PII or access control., E (Custom scripts): Custom scripting increases the operational burden compared to a built-in solution like DataBrew., References:, AWS Glue DataBrew for Data Masking, IAM Policies for PII Access Control, ]