AWS Certified Cloud Practitioner (CLF-C02) — Question 579

A company wants to use a managed service to identify and protect sensitive data that is stored in Amazon S3.

Which AWS service will meet these requirements?

Answer options

• A. AWS IAM Access Analyzer
• B. Amazon GuardDuty
• C. Amazon Inspector
• D. Amazon Macie

Correct answer: D

Explanation

Amazon Macie is the correct choice because it is specifically designed to discover and protect sensitive data, such as personally identifiable information (PII), stored in Amazon S3 using machine learning and pattern matching. AWS IAM Access Analyzer helps identify resource sharing, Amazon GuardDuty is a threat detection service, and Amazon Inspector assesses applications for exposure and vulnerabilities, making them incorrect for this use case.