5.2Standard
Prompts and outputs are logged for troubleshooting.
Protect sensitive data while retaining auditability.
Choose two designs.
× Incorrect
Minimize and mask sensitive content, use least-privilege access, and design tamper detection, retention, audit access, and correlation IDs.
Detailed explanation
IncorrectStore every secret and token in plaintext for debugging
Breach impact grows.
CorrectUse tamper detection, retention and deletion, audit access, and correlation IDs
Investigation remains trustworthy.
CorrectMask unnecessary personal or secret values and restrict log access
Exposure is reduced.
IncorrectDo not log access to logs
Misuse cannot be traced.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のログ、個人情報、最小権限、監査を確認する。
Official references
What to confirm
調査可能なログを残しながら、秘密情報と個人情報の露出を抑えられる。
Key points
- Log minimization
- Tamper detection
- Correlation ID
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Log minimization
Recording only the data needed for operations, security, or audit purposes.
Correlation ID
An identifier that links related events across services and requests.
Question IDAWS-AIF-448
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue