A healthcare company is developing a generative AI (GenAI) application that recommends patient treatment plans...

Option A addresses all three governance layers. Model cards provide documented information about a model’s capabilities, limitations, supported modalities, context constraints, and other characteristics that teams can review before deployment. Amazon Bedrock Guardrails can enforce application-specific safeguards on user inputs and model responses, and IAM policies can require a specific guardrail for inference calls, helping prevent uncontrolled model use. Storing generated outputs in Amazon S3 provides durable audit storage, while S3 Object Lock uses a write-once-read-many model that can prevent retained objects from being overwritten or deleted and is specifically intended to support regulatory retention requirements. Option B lacks formal model-limit documentation and relies on custom postprocessing. Option C does not protect stored audit evidence against tampering. Option D relies primarily on prompts and ordinary database storage rather than enforceable safety and immutable-retention controls. AWS Documentation

================