CLF-C02 Practice Test 8

At a company, engineers regularly sign in to production database servers to run ad hoc queries against customer records, and they change firewall rules by hand in the console. A security architect wants to reduce direct human handling of sensitive data and to define security controls as code in version-controlled templates. Which design principles of the AWS Well-Architected Framework security pillar match these goals? (Choose TWO.)