A prompt needs a customer ID for analysis.
Do not send the real identifier to the model.
Choose two controls.
Replace identifiers with random tokens and isolate the mapping table, while continuing to control reidentification, logs, retention, and access.
Detailed explanation
The model need not receive the direct identifier.
The model need not receive the direct identifier.
The token is not treated as risk-free.
The token is not treated as risk-free.
A mapping table or combination can reidentify.
A mapping table or combination can reidentify.
Separation is lost.
Separation is lost.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 5.1のデータ保護、トークン化、最小権限を確認する。Expected result
トークン化がアクセス分離であり、完全な匿名化を自動保証しないと説明できる。Key points
- Tokenization
- Mapping
- Reidentification
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.