A new analytics data lake bucket unexpectedly may receive resident PII from upstream jobs. Which managed security service is most appropriate to discover sensitive data landing in the lake?
Select an answer to reveal the explanation.
Short Explanation
Macie is the librarian that reads the lake shelves and flags personal data that should not be sitting in the open stacks. Polly and GameLift are different tools for different jobs.
Full Explanation
When a new analytics data lake bucket may unexpectedly receive resident PII from upstream jobs, the appropriate managed discovery service is Amazon Macie, which discovers and reports sensitive data such as PII in S3. Amazon Polly narrates text as audio and does not classify bucket objects for PII. AWS Snowball Edge is a data transfer appliance, not a continuous in-lake PII scanner for objects already stored. Amazon GameLift manages game session infrastructure and is irrelevant to object classification. Exam caveat: Macie findings need ownership and remediation workflows—discovery without redaction, access tightening, or job fixes leaves PII exposed. Operational check: enable Macie on the lake account, run a discovery job on the suspect prefix, review findings for PII types, and open tickets to stop upstream leakage and restrict bucket policies. In municipal cloud governance, record the owners, success metrics, and rollback or restore contacts beside this technical choice so the next incident, budget review, or audit does not rediscover the decision from scratch under time pressure. In municipal cloud governance, record the owners, success metrics, and rollback or restore contacts beside this technical choice so the next incident, budget review, or audit does not rediscover the decision from scratch under time pressure.