AI World 5 · Serve and Secure · Stage 4

Lock It Down

The bank's key on the volumes and the results, one caller for one endpoint, an execution role that can load the model, and an audit trail of every invocation.

KMS on volumes and outputs
Caller and execution roles
CloudTrail data events

Domain: AI and machine learning
World: AI World 5: Serve and Secure (Associate)
Game type: Solution board: Drop services into each row's slots, then run records through them.
Time: About 25 minutes on a first attempt (estimated)
Exam guides: MLA-C02Skill 4.3.2: Configure least privilege access to ML and AI artifacts; Skill 4.3.3: Configure IAM policies and roles for users and applications in ML and AI systems; Skill 4.3.4: Configure comprehensive monitoring, auditing, compliance, and logging for ML and AI systems (for example, AWS CloudTrail, AWS Config); Skill 4.3.5: Troubleshoot and debug security issues in ML and AI systems
AIP-C01Skill 2.3.3: Create secure access frameworks to ensure appropriate security controls (for example, by using identity federation between FM services and enterprise systems, role-based access control for model and data access, least privilege API access to FMs); Skill 3.3.2: Implement data source tracking to maintain traceability in GenAI applications (for example, by using AWS Glue Data Catalog to register data sources, metadata tagging for source attribution in FM-generated content, CloudTrail for audit logging)