Log prompts and outputs for troubleshooting.
Do not retain card numbers or personal data.
Choose two designs.
Detect and mask or tokenize sensitive values before logging, and audit log access, retention, copying, export, and deletion requests.
Detailed explanation
Troubleshooting and confidentiality are balanced.
Troubleshooting and confidentiality are balanced.
Logs have their own data lifecycle.
Logs have their own data lifecycle.
The log becomes a source of leakage.
The log becomes a source of leakage.
Insider misuse and compromise remain possible.
Insider misuse and compromise remain possible.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 5.1のログ保護、データ最小化、Guardrailsを確認する。Expected result
調査用ログへ必要な証跡を残しつつ機密情報を最小化できる。Key points
- Masking
- Tokenization
- Log retention
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.