Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 14 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 14
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A financial company must store original customer records for 10 years for legal reasons. A complete record contains personally identifiable information (PII). According to local regulations, PII is available to only certain people in the company and must not be shared with third parties. The company needs to make the records available to third-party organizations for statistical analysis without sharing the PII.
A developer wants to store the original immutable record in Amazon S3. Depending on who accesses the S3 document, the document should be returned as is or with all the PII removed. The developer has written an AWS Lambda function to remove the PII from the document. The function is named removePii.
What should the developer do so that the company can meet the PII requirements while maintaining only one copy of the document?

A. Set up an S3 event notification that invokes the removePii function when an S3 GET request is made. Call Amazon S3 by using a GET request to access the object without PII.
B. Set up an S3 event notification that invokes the removePii function when an S3 PUT request is made. Call Amazon S3 by using a PUT request to access the object without PII.
C. Create an S3 Object Lambda access point from the S3 console. Select the removePii function. Use S3 Access Points to access the object without PII.
D. Create an S3 access point from the S3 console. Use the access point name to call the GetObjectLegalHold S3 API function. Pass in the removePii function name to access the object without PII.

Show Suggested Answer

Suggested Answer: C 🗳️

by aragon_saa at March 15, 2023, 11:34 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

gcmrjbr

Highly Voted 1 year, 9 months ago

An S3 Object Lambda access point is a new type of access point that you can create to invoke your own AWS Lambda function to modify the content of an S3 object. You can use S3 Object Lambda access points to transform data as it is being retrieved from an S3 bucket, without modifying the original data stored in the bucket

upvoted 21 times

Skip

1 year, 1 month ago

Thanks for the info. Great heads up!

upvoted 2 times

...

Untamables

Highly Voted 2 years, 5 months ago

Selected Answer: C

C https://aws.amazon.com/s3/features/object-lambda/

upvoted 13 times

...

sumanshu

Most Recent 8 months ago

Selected Answer: C

A) Eliminated - function cannot be invoked when a GET request is made. B) Eliminated - It will either create two copies or overwrite existing copy D) Eliminated - GetObjectLegalHold this API is used to check if an object is under a legal hold. It has nothing to do with dynamically modifying or removing PII from documents.

upvoted 3 times

...

trieudo

8 months, 1 week ago

Selected Answer: C

=> Discard A: S3 event notification not support GET => Discard B: violate this rule 'keyword: only one copy of the document'. S3 event notification with PUT, make a copy (without PII) beside original record => Dsiscard D: API GetObjectLegelHold is s3 GET API to know s3 object is editable, it can't update/ edit s3 object. Lambda can't auto be called by this API C: Lambda access point is intermediary s3 object and end-user, it modifies a copy of data (delete PII) then return user, then delete this data from local lambda memory

upvoted 1 times

...

ahadh7621

1 year, 1 month ago

Selected Answer: C

https://aws.amazon.com/s3/features/object-lambda/ With S3 Object Lambda, you can add your own code to S3 GET, HEAD, and LIST requests to modify and process data as it is returned to an application. You can use custom code to modify the data returned by S3 GET requests to filter rows, dynamically resize images, redact confidential data, and much more.

upvoted 2 times

...