A company stores its data in data tables in a series of Amazon S3 buckets.

Requirement Summary:

Customercredit card datamay be exposed

Data is stored inAmazon S3

Developer mustidentify all exposure risks

Tool to Use:

✅Amazon Macieis designed to:

Automatically scan S3for sensitive data

Detectfinancial information, PII, credentials, etc.

Finding Type Mapping:

Credit card datamaps to: SensitiveData:S3Object/Financial

Evaluate Options:

A. Athena + filtering

❌Athena is a query engine; it doesn’tdetect sensitive dataautomatically

✅B. Macie + Financial finding type

✅Correct

Designed for this use case

C. Macie + Personal finding type

❌Personal maps to names, addresses, etc., notcredit cards

D. Athena + Financial

❌Again, Athena can’t classify data – it only queries structured data

Macie Overview:https://docs.aws.amazon.com/macie/latest/userguide/what-is-macie.html

Finding Types:https://docs.aws.amazon.com/macie/latest/user/findings-types.html

Financial finding type: SensitiveData:S3Object/Financial