A city classifies datasets as Public, Internal, or Confidential and must map that classification to S3 buckets, encryption, and access controls. Which design best uses classification to drive data security controls?
Select an answer to reveal the explanation.
Short Explanation
Classification is the city’s sorting hat: Public flyers, Internal memos, and Confidential case files should not share one unlocked drawer. Different buckets or prefixes, keys, and policies make the label actually mean something.
Full Explanation
Data classification should drive encryption strength, access policies, and retention. Separating Public, Internal, and Confidential data across buckets or tightly controlled prefixes with appropriate KMS keys and policies implements that principle. Mixing classifications in a writable shared bucket or weakening controls on Confidential data contradicts Task 1.3 governance expectations.