AWS Certified Cloud Practitioner (CLF-C02)Security and ComplianceMedium
A company wants a fully managed service that uses machine learning to automatically discover and classify sensitive data, such as personally identifiable information (PII), stored in Amazon S3 buckets. Which AWS service should the company use?
- AAmazon Macie
- BAWS Config
- CAmazon GuardDuty
- DAmazon Inspector
Show answer & explanationAnswer & explanation
Correct answer: A. Amazon Macie
Amazon Macie uses machine learning and pattern matching to automatically discover, classify, and protect sensitive data such as PII stored in Amazon S3, generating alerts when it finds risky or exposed data.
Why the other options are wrong
- B. Config tracks resource configuration compliance, not data content.
- C. GuardDuty detects threats via log analysis, not S3 data classification.
- D. Inspector scans for software vulnerabilities and network exposure, not data classification.
Amazon Macie
A fully managed data security service that uses machine learning to discover, classify, and protect sensitive data like PII in Amazon S3.
- Focuses on S3 data discovery
- Uses ML and pattern matching
- Generates findings for exposed/sensitive data
Memory trick: Macie 'sees' sensitive data hiding in S3.