Full AWS Practitioner Certification Question

A financial analytics company stores transactional data in an Amazon Aurora PostgreSQL DB cluster. By policy, the company must retain all transactional data for exactly 4 years and then permanently delete it. However, audit logs that track all activity within the database must be preserved indefinitely. Currently, the Aurora cluster is configured with automated backups. What combination of actions should a solutions architect recommend to meet these regulatory and operational requirements?