AIF-C01 Question 203
Select 3You are designing an AI system hosted on AWS, which processes sensitive customer data. To ensure the system complies with security and privacy requirements, you need to implement measures to secure the data and restrict unauthorized access. Which of the following actions should you take to secure this AI system?
- A
Use IAM roles with least privilege to grant access to AI system resources.
- B
Enable AWS PrivateLink to ensure communication between AI components stays within the AWS network.
- C
Store sensitive data in Amazon S3 without encryption for faster processing.
- D
Use Amazon Macie to identify and protect sensitive data in your storage.
- E
Rely entirely on AWS to secure your AI system as part of the shared responsibility model.
Show answer and explanation
Correct answers: A, B, D
Explanation
To secure AI systems on AWS, you must implement security best practices such as using IAM roles with least privilege, AWS PrivateLink for secure communication, and tools like Amazon Macie for identifying and protecting sensitive data. While AWS manages the security of the underlying infrastructure, you are responsible for securing your data and applications as part of the shared responsibility model.
- A. Correct.
Correct: IAM roles with least privilege ensure users and services have only the necessary permissions to access resources, reducing the risk of unauthorized access.
- B. Correct.
Correct: AWS PrivateLink ensures secure communication between AI components by keeping data within the AWS network, minimizing exposure to the public internet.
- C. Incorrect.
Incorrect: Storing sensitive data without encryption compromises the security of your system, making it vulnerable to potential breaches.
- D. Correct.
Correct: Amazon Macie helps identify sensitive data like personally identifiable information (PII) and ensures it is protected in compliance with security and privacy regulations.
- E. Incorrect.
Incorrect: The AWS shared responsibility model requires you to secure your applications and data. AWS secures the underlying infrastructure, but you must implement security measures for your AI system.