Compliance requires continuously discovering and reporting PII (names, credit cards, addresses) stored across all S3 buckets in the organization. Which service does this?
A.Amazon Macie
Sensitive-data discovery = Macie. Correct.
B.AWS Config
Config audits resource configuration state, not data content.
C.Amazon Inspector
Inspector finds software/network vulnerabilities, not PII.
D.AWS CloudTrail
CloudTrail records API activity, not data inspection.
Why this answer
Macie uses ML + pattern matching to discover sensitive data (PII, credentials) in S3 and report where it lives — purpose-built for data classification. Config tracks resource configuration; Inspector scans for vulnerabilities; CloudTrail logs API calls.
Correct answer: A · Last reviewed 2026-11-02
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Data Protection & Encryption practice session.
Practice Data Protection & Encryption