A company has an application that provides marketing services to stores. The services are based on previous purchases by store customers. The stores upload transaction data to the company through SFTP, and the data is processed and analyzed to generate new marketing offers. Some of the files can exceed 200 GB in size. Recently, the company discovered that some of the stores have uploaded files that contain personally identifiable information (PII) that should not have been included. The company wants administrators to be alerted if PII is shared again. The company also wants to automate remediation. What should a solutions architect do to meet these requirements with the LEAST development effort?
Select one answer.
Marked answer: B
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose B1
Correct answer is b. Why other are incorrect..... A. Amazon Inspector → Inspector is for scanning EC2 instances, containers, and Lambda functions for vulnerabilities, not for scanning S3 objects for PII. C. Custom Lambda scanning → Requires building and maintaining your own detection logic, which is complex and error‑prone. Not “least development effort.” D. Custom Lambda + SES + Lifecycle policy → Same issue as C, plus SES is for sending emails, not the best fit for automated alerts/remediation. Lifecycle policies are not designed for immediate remediation based on content.
Chose B1
The only reason I would choose B is because Macie is propriatary AWS, sort of like with Cisco when you are answering their questions, the answer is always Cisco. But otherwise, according to the question, remediation needs to be automatic, which only leaves D.
Chose B1
Amazon Macie + SNS is the least effort, fully managed, and most purpose-fit solution to scan for PII in S3 and alert administrators automatically.
