MLS-C01 Question 260
Select 3Your machine learning team has deployed a model on Amazon SageMaker, and you want to monitor and audit API calls made to the model endpoint for security and compliance purposes. Additionally, you want to set up alerts if any unauthorized activities are detected. How can you achieve this using AWS services?
- A
Enable AWS CloudTrail to log API calls and configure Amazon CloudWatch Alarms to monitor specific events.
- B
Use Amazon CloudWatch Logs to directly capture API call history without using AWS CloudTrail.
- C
Enable AWS CloudTrail Data Events specifically for the SageMaker endpoint to capture detailed API call information.
- D
Create a CloudWatch Alarm for SageMaker metrics such as 'InferenceRequests' to detect unauthorized activities.
- E
Set up Amazon CloudWatch Logs Insights to query CloudTrail logs for suspicious activities.
Show answer and explanation
Correct answers: A, C, E
Explanation
To monitor and audit API calls made to a SageMaker endpoint, you need to enable AWS CloudTrail to log API calls and optionally configure Data Events for detailed logging. These logs can then be analyzed using CloudWatch Logs Insights to detect suspicious activities. Additionally, CloudWatch Alarms can be set up to trigger alerts based on specific patterns in the logs, ensuring proactive monitoring and security.
- A. Correct.
Correct: AWS CloudTrail is used to log API calls, and CloudWatch Alarms can monitor specific patterns or actions in the logs, such as unauthorized access.
- B. Incorrect.
Incorrect: While Amazon CloudWatch Logs can store log data, it doesn't directly capture API call history. AWS CloudTrail is required for this.
- C. Correct.
Correct: Enabling AWS CloudTrail Data Events for the SageMaker endpoint provides detailed logs of API calls, which are critical for security and compliance monitoring.
- D. Incorrect.
Incorrect: SageMaker metrics like 'InferenceRequests' monitor model performance, not unauthorized activities or API call history.
- E. Correct.
Correct: Amazon CloudWatch Logs Insights allows querying of CloudTrail logs for patterns or anomalies, making it a valuable tool for detecting suspicious activities.