Store prompts, outputs, evaluations, and audit logs.
Do not retain personal data beyond its purpose.
Choose two policies.
Define purpose, retention, access, and deletion by data type, account for legal and audit requirements, and record deletion and exceptions.
Detailed explanation
Evidence and unnecessary personal data can be distinguished.
Retention is justified and verifiable.
Data can remain after the primary copy is deleted.
Purpose limitation and breach impact worsen.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のデータライフサイクル、保持、削除、コンプライアンスを確認する。
Official references
What to confirm
必要な監査証跡を残しつつ、目的を超えるデータ保持を避けられる。
Key points
- Retention
- Deletion
- Backups
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Retention policy
Rules that specify why a data type is kept, for how long, and when it is deleted.
Deletion propagation
Applying a deletion request to derived, replicated, cached, and backed-up copies as required.