Secure Architecture V

Question 38

A financial services company must ensure that sensitive customer information in its AWS S3 buckets is properly classified and protected. It wants a solution that can automatically discover, classify, and protect sensitive data across its AWS environment.

Which AWS service should it use to achieve this?

A. Implement AWS IAM policies to restrict access to S3 buckets containing sensitive information, ensuring only authorized users can access the data.

B. Utilize AWS CloudTrail to monitor and log API requests to S3 buckets, ensuring that access and changes to sensitive data are recorded.

C. Use AWS Macie to automatically discover and classify sensitive data in S3 buckets, helping to ensure that data protection and compliance requirements are met.

D. Use Amazon GuardDuty to monitor suspicious activities and potential threats involving data stored in S3 buckets.