A company wants to use Amazon Macie to discover sensitive data in their S3 buckets. However, they have petabytes of data and are concerned about the cost of scanning everything. Which TWO strategies should a solutions architect recommend to optimize Macie costs? (Select TWO.)

Answer options:

Configure Macie to perform automated sensitive data discovery (sampling).

Use S3 Select to filter data before Macie scans it.

Exclude specific S3 buckets from Macie scans using bucket tags.

Move the data to S3 Glacier before scanning.

Purchase Macie Reserved Capacity.

How to approach this question

Identify ways to reduce the volume of data Macie processes. Sampling and excluding buckets are the native methods.

Full Answer

Use object tagging to exclude buckets and configure Macie to sample data.

To optimize Amazon Macie costs, you can enable automated sensitive data discovery, which uses intelligent sampling rather than full object scans. Additionally, you can explicitly exclude specific S3 buckets (e.g., public assets, logs) from being scanned to avoid unnecessary charges.

Common mistakes

Thinking Macie has Reserved Capacity pricing like EC2.

Question 64 All questions

Practice the full AWS SAA-C03 Practice Exam 3

65 questions · hints · full answers · grading

More questions from this exam

Q01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only...Easy Q02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...Medium Q03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (AL...Easy Q04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized ...Medium Q05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. T...Medium

View all 65 questions →