A company is building a data analysis platform on AWS by using AWS Lake Formation. The platform will ingest data from different sources such as Amazon S3 and Amazon RDS. The company needs a secure solution to prevent access to portions of the data that contain sensitive information. Which solution will meet these requirements with the LEAST operational overhead?

• ACreate an IAM role that includes permissions to access Lake Formation tables.
• BCreate data filters to implement row-level security and cell-level security.
• CCreate an AWS Lambda function that removes sensitive information before Lake Formation ingests the data.
• DCreate an AWS Lambda function that periodically queries and removes sensitive information from Lake Formation tables.