AWS Certified Data Engineer Associate · Free Practice Question Medium

Question 14

To comply with data sovereignty laws, a multinational company needs to prevent specific data from leaving the regional boundaries. Which AWS service or feature ensures data residency compliance?
  • A AWS DataSync
  • B Amazon S3 Bucket Policies
  • C Amazon S3 Cross-Region Replication
  • D Amazon Macie
Reveal correct answer

Correct answer: B

Explanation

Amazon S3 Bucket Policies can be configured to enforce data residency by restricting cross-region replication and access, ensuring that data does not leave regional boundaries and complies with data sovereignty laws.

A. AWS DataSync is a service used to transfer data between on-premises storage and AWS storage services. While it can help with data transfer, it does not inherently ensure data residency compliance within regional boundaries.

B. Amazon S3 Bucket Policies allow you to control access to your S3 buckets and objects. By configuring bucket policies, you can restrict data access to specific regions, ensuring that data does not leave the regional boundaries and complying with data sovereignty laws.

C. Amazon S3 Cross-Region Replication is used to replicate data across different AWS regions for redundancy and disaster recovery purposes. It does not specifically address data residency compliance within regional boundaries.

D. Amazon Macie is a security service that helps discover, classify, and protect sensitive data. While it can assist in data protection and compliance, it does not directly ensure data residency compliance within regional boundaries.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need