Summarize customer emails that may contain phone numbers and addresses.
The summary does not need those details.
Choose two appropriate controls.
Minimize or mask unnecessary personal data before inference and protect logs and storage with access and retention controls.
Detailed explanation
Input and output logs may contain personal information and need protection.
Reducing data before processing lowers exposure.
Public storage can disclose sensitive information.
Unnecessary data increases exposure.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01ガイドのDomain 5.1とAWSデータ保護・プライバシー設計を確認する。
Official references
What to confirm
データ最小化とログ・保存先の保護を別々の対策として説明できる。
Key points
- Data minimization
- Masking
- Log protection
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Exposure reduction
Removing unnecessary personal data lowers the consequences of a prompt, log, or storage disclosure.
Secondary copies
Logs, caches, indexes, and backups can preserve sensitive values after the source is changed.