AWS Certified Machine Learning - Specialty MLS-C01 — Topic 1 Question 116

Question

A machine learning (ML) specialist wants to secure calls to the Amazon SageMaker Service API. The specialist has configured Amazon VPC with a VPC interface endpoint for the Amazon SageMaker Service API and is attempting to secure traffic from specific sets of instances and IAM users. The VPC is configured with a single public subnet. Which combination of steps should the ML specialist take to secure the traffic? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Add a VPC endpoint policy to allow access to the IAM users. Option C: Modify the security group on the endpoint network interface to restrict access to the instances. A VPC endpoint provides private connectivity to AWS services without traversing the public internet. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Machine Learning - Specialty MLS-C01 — Question 116