A parks dataset mixes public park hours with resident home addresses and phone numbers. Logging currently writes both kinds of fields the same way to CloudWatch. What should developers do first?
Select an answer to reveal the explanation.
Short Explanation
Park hours are the flyer on the community board; home addresses are the locked filing cabinet. Classify first, then treat PII differently in logs — do not dump phones and street numbers beside "sunrise open."
Full Explanation
Applications must classify sensitive data such as PII separately from public information and handle each class appropriately in code and logging. Treating addresses and phones like public park hours leaks PII into broadly readable logs. Public-read log buckets and deliberate PII duplication increase exposure rather than fixing classification.