AWS Certified Data Engineer - Associate DEA-C01 — Topic 1 Question 180

Question

A company saves customer data to an Amazon S3 bucket. The company uses server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the bucket. The dataset includes personally identifiable information (PII) such as social security numbers and account details. Data that is tagged as PII must be masked before the company uses customer data for analysis. Some users must have secure access to the PII data during the pre-processing phase. The company needs a low-maintenance solution to mask and secure the PII data throughout the entire engineering pipeline. Which combination of solutions will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: Use AWS Glue DataBrew to perform extract, transform, and load (ETL) tasks that mask the PII data before analysis. Option D: Use AWS Identity and Access Management (IAM) to manage permissions and to control access to the PII data. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Data Engineer - Associate DEA-C01 — Question 180