Log inputs and outputs for troubleshooting.
They may contain personal data or secrets.
Choose two designs.
Mask or tokenize sensitive values before logging and manage access, retention, export, deletion, and audit as a separate data lifecycle.
Detailed explanation
Logs have their own lifecycle.
Exposure and over-retention increase.
Insider misuse and compromise remain possible.
Log confidentiality is improved.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.1のログ保護、データ最小化、アクセス管理を確認する。
Official references
What to confirm
調査用ログの有用性と個人情報・秘密の保護を両立できる。
Key points
- Log protection
- Minimization
- Retention
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Prompt log
A record of inputs, outputs, or metadata from an AI interaction.
Log minimization
Recording and retaining only the telemetry needed for an approved purpose.