A data engineer is tasked with using AWS services to ingest a dataset into an Amazon S3 data lake. Upon profiling the dataset manually, the engineer finds that it contains personally identifiable information (PII). The engineer needs to devise a method to both profile the dataset and mask the PII effectively. Which of the following options can be independently used to fulfill this requirement with the least amount of operational effort? (Select two)