AWS Certified Developer – Associate (DVA-C02) — Question 463

An Amazon Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket.

What should the developer do to meet these requirements?

Answer options

• A. Implement Firehose data transformation as an AWS Lambda function. Configure the function to remove the customer identifiers. Set an Amazon S3 bucket as the destination of the delivery stream.
• B. Launch an Amazon EC2 instance. Set the EC2 instance as the destination of the delivery stream. Run an application on the EC2 instance to remove the customer identifiers. Store the transformed data in an Amazon S3 bucket.
• C. Create an Amazon OpenSearch Service instance. Set the OpenSearch Service instance as the destination of the delivery stream. Use search and replace to remove the customer identifiers. Export the data to an Amazon S3 bucket.
• D. Create an AWS Step Functions workflow to remove the customer identifiers. As the last step in the workflow, store the transformed data in an Amazon S3 bucket. Set the workflow as the destination of the delivery stream.

Correct answer: A

Explanation

Amazon Data Firehose natively supports data transformation using AWS Lambda functions to modify and clean incoming data before delivering it to destinations like Amazon S3. Utilizing Lambda for this purpose is a serverless, highly scalable, and integrated solution for PII removal. Other options like EC2, OpenSearch, or Step Functions introduce unnecessary complexity, cost, or are not supported as direct delivery stream destinations for this workflow.