Answer: Prompts are processed in-region and never retained

**Correct Answer: C** **Explanation:** Amazon Bedrock is designed with strong compliance and security features for sensitive industries like finance and healthcare. The key aspects are: 1. **In-region processing**: Customer prompts are processed within the AWS region where the service is deployed, ensuring data residency compliance. 2. **No retention policy**: Prompts are not stored or retained after processing, which minimizes data exposure and aligns with strict compliance requirements. 3. **Compliance certifications**: Amazon Bedrock supports various compliance frameworks including HIPAA, GDPR, and financial industry regulations. **Why other options are incorrect:** - **A**: While auditing is important, storing prompts (even temporarily) could violate strict compliance requirements for sensitive data. - **B**: Using external third-party services would introduce additional compliance risks and data transfer concerns. - **D**: Replicating prompts across multiple regions would violate data residency requirements and increase exposure risks. This approach ensures that sensitive customer data in regulated industries remains protected and compliant with industry-specific regulations.

Author: Ritesh Yadav