AWS Certified AI Practitioner AIF-C01Demo

By Amazon · Question Mode

QuestionQ227

Security, Compliance, and Governance for AI Solutions

A company needs to fine-tune an ML model hosted on Amazon Bedrock. The company plans to use its own sensitive data, which is stored in private databases in a VPC. The data must remain inside the company’s private network.

Which solution meets these requirements?

  • A Restrict access to Amazon Bedrock by using an AWS Identity and Access Management (IAM) service role.
  • B Restrict access to Amazon Bedrock by using an AWS Identity and Access Management (IAM) resource policy.
  • C Use AWS PrivateLink to connect the VPC and Amazon Bedrock.
  • D Use AWS Key Management Service (AWS KMS) keys to encrypt the data.
Explanation

AWS PrivateLink provides an interface VPC endpoint that privately connects a VPC to Amazon Bedrock, allowing Bedrock API access without an internet gateway, NAT device, VPN, or public IP addresses. IAM policies control permissions and AWS KMS encrypts data, but neither provides the required private network connectivity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!