AWS Certified Machine Learning - Specialty MLS-C01 — Topic 1 Question 142

Question

A company provisions Amazon SageMaker notebook instances for its data science team and creates Amazon VPC interface endpoints to ensure communication between the VPC and the notebook instances. All connections to the Amazon SageMaker API are contained entirely and securely using the AWS network. However, the data science team realizes that individuals outside the VPC can still connect to the notebook instances across the internet. Which set of actions should the data science team take to fix the issue?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create an IAM policy that allows the sagemaker:CreatePresignedNotebooklnstanceUrl and sagemaker:DescribeNotebooklnstance actions from only the VPC endpoints. Apply this policy to all IAM users, groups, and roles used... A VPC endpoint provides private connectivity to AWS services without traversing the public internet. Amazon SageMaker builds, trains and deploys machine learning models in a fully managed service. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Machine Learning - Specialty MLS-C01 — Question 142