MLA-C01 Question 445
Select 3You are designing a machine learning solution for a healthcare organization that must comply with HIPAA regulations. The organization requires secure data handling and encryption for sensitive patient data. Which of the following SageMaker features will help you meet the compliance requirements?
- A
Enabling Amazon SageMaker Model Monitor to track model performance over time
- B
Using AWS Key Management Service (KMS) to encrypt data at rest in SageMaker
- C
Configuring SageMaker to run training and hosting jobs within a VPC
- D
Enabling SageMaker Data Wrangler to preprocess data
- E
Using AWS Identity and Access Management (IAM) to control access to SageMaker resources
Show answer and explanation
Correct answers: B, C, E
Explanation
To meet HIPAA compliance requirements, you need to ensure secure data handling and implement access controls. Using AWS KMS for encryption protects data at rest, running SageMaker jobs in a VPC ensures secure network isolation, and configuring IAM policies provides robust access control. Together, these features ensure that the healthcare organization's machine learning solution adheres to security and compliance standards.
- A. Incorrect.
While SageMaker Model Monitor is useful for tracking model performance, it does not directly address data security or compliance requirements like encryption or access control.
- B. Correct.
AWS KMS allows you to encrypt data at rest in SageMaker, ensuring the security of sensitive data. This is a critical feature for meeting HIPAA compliance requirements.
- C. Correct.
Running SageMaker jobs within a VPC ensures network isolation and secure communication, which is essential for compliance with regulations like HIPAA.
- D. Incorrect.
SageMaker Data Wrangler is used for data preprocessing and does not provide features related to security or compliance.
- E. Correct.
IAM is critical for controlling access to SageMaker resources, ensuring that only authorized users can access sensitive data and operations. This is a key requirement for compliance with regulations like HIPAA.