Clickstream analytics for the city portal accidentally forwards raw resident email addresses into a less-controlled OpenSearch index used by interns. What should the pipeline do?
Select an answer to reveal the explanation.
Short Explanation
Analytics sinks are often the leaky garden hose. Strip or tokenize emails before clickstream lands in the intern OpenSearch index — raw inboxes do not belong in lower-trust search.
Full Explanation
Sensitive fields must not flow into lower-trust analytics systems without tokenization, hashing, aggregation, or omission. Fixing access with broader source-table deletes, disabling OpenSearch controls, or duplicating full profiles increases PII exposure rather than containing it.