The correct answer is C because the requirement is prompt-level model routing to a specific self-hosted Amazon Bedrock model. Salesforce supports Bring Your Own Large Language Model (BYOLLM) through AI Models, formerly Einstein Studio, and lists Amazon Bedrock as a supported provider. After the model is registered, the specialist can select that model for the relevant prompt template, ensuring the prompt uses the required model instead of a default provider. Option A is wrong because permission sets on metadata records are not how prompt templates route model execution. Option B is wrong because Private Connect controls network connectivity, not prompt-template model selection. Compliance-sensitive routing must be handled by registering and selecting the approved model explicitly.