A company needs a solution to automatically ingest data from an Amazon S3 bucket to an Amazon Redshift table every day. The company must obfuscate sensitive data in Amazon Redshift. Users must not be able to view the sensitive data as plaintext.
Which solution will meet these requirements with the LEAST operational overhead?
Correct Answer: D
Schedule an AWS Glue job to load S3 data into Amazon Redshift, then use Redshift's built-in sensitive data discovery and dynamic data masking to identify sensitive columns and enforce masking at query time. This meets the daily ingest and non-plaintext visibility requirements with the least operational overhead, since masking is managed natively in Redshift without custom obfuscation pipelines or Macie-based preprocessing.