A company is storing data in Amazon S3 buckets. The company needs to retain any objects that contain personally identifiable information (PII) that might need to be reviewed. A solutions architect must develop an automated solution to identify objects that contain PII and apply the necessary controls to prevent deletion before review. Which combination of steps should the solutions architect take to meet these requirements? (Select THREE)