Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 205 discussion

keywords: S3 Object Lambda access point to redact data

https://docs.aws.amazon.com/AmazonS3/latest/userguide/tutorial-s3-object-lambda-uppercase.html

answer D

https://docs.aws.amazon.com/AmazonS3/latest/userguide/tutorial-s3-object-lambda-uppercase.html

S3 Object Lambda access point is not suitable for generating reports. Generally, creating a report requires an aggregate process, which is expensive. Since reports are expected to be viewed multiple times, it is inefficient to pay for Lambda processing time and CPU costs each time they are viewed. To adopt D, CloudFront should be added to the front. https://aws.amazon.com/jp/blogs/aws/new-use-amazon-s3-object-lambda-with-amazon-cloudfront-to-tailor-content-for-end-users/

D, using S3 Object Lambda access points, is the most appropriate solution for the requirements: S3 Object Lambda allows you to add your own code to S3 GET requests to modify and process data at the time of retrieval. In this scenario, you can create an S3 access point that uses the raw data's S3 bucket as the destination. For each application, create a separate S3 Object Lambda access point that uses the S3 access point as the source. Configure the AWS Lambda function for each S3 Object Lambda access point to redact data when objects are retrieved. This solution ensures that each application can access the data with its own redaction rules, and the redaction is applied dynamically at the time of retrieval.

Single source of truth: This solution maintains a single copy of the raw data in the original S3 bucket, avoiding data duplication and associated costs. Fine-grained redaction: Each application has its own S3 Object Lambda access point, allowing independent Lambda functions to redact data according to specific needs. This ensures targeted redaction without creating multiple S3 buckets with potentially inefficient data copies. Efficient access: Applications access the data through their respective S3 Object Lambda access points, incurring the redaction processing only when data is retrieved, improving cost-effectiveness compared to upfront redaction approaches.

D is correct: S3 access point is actually S3 lambda access point, which is option D A and B: too expensive C: is not correct

D. S3 Bucker endpoint plus Lambda