A solutions architect is building an Amazon S3 data lake for a company.

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Dec 31, 2025
Questions: 670

Amazon Web Services SAA-C03 Question Answer

A solutions architect is building an Amazon S3 data lake for a company. The company uses Amazon Kinesis Data Firehose to ingest customer personally identifiable information (PII) and transactional data in near real-time to an S3 bucket. The company needs to mask all PII data before storing thedata in the data lake.

Which solution will meet these requirements?

Create an AWS Lambda function to detect and mask PII. Invoke the function from Kinesis Data Firehose.

Use Amazon Macie to scan the S3 bucket. Configure Macie to detect and mask PII.

Enable server-side encryption (SSE) on the S3 bucket.

Create an AWS Lambda function that integrates with AWS CloudHSM. Configure the function to detect and mask PII.