The Fintech startup, InnovateCloud's Platform Engineering team needs to secure their Python-based Lambda functions. InnovateCloud must implement automatic scanning of their Lambda functions and layers for CVEs, while also performing automated code scans for potential data leaks on a subset of Lambda functions only. The Lambda functions are deployed as .zip files and use a Lambda layer with common libraries, all stored in an S3 bucket. Which combination of actions will meet these requirements? (Choose three.)