AWS Certified Machine Learning - Specialty MLS-C01 — Topic 1 Question 265

Question

A machine learning (ML) specialist uploads a dataset to an Amazon S3 bucket that is protected by server-side encryption with AWS KMS keys (SSE-KMS). The ML specialist needs to ensure that an Amazon SageMaker notebook instance can read the dataset that is in Amazon S3. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Assign an IAM role that provides S3 read access for the dataset to the SageMaker notebook. Grant permission in the KMS key policy to the IAM role. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon SageMaker builds, trains and deploys machine learning models in a fully managed service. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

AWS Certified Machine Learning - Specialty MLS-C01 — Question 265