AIF-C01 Domain 5: Security, Compliance, and Governance for AI Solutions

During peak traffic, the platform team must control which IAM principals can invoke Bedrock models. What should they do FIRST? control which IAM principals can invoke Bedrock models.

Multiple choice — select one answer

Answer choices

  1. a. IAM policies for bedrock:InvokeModel
  2. b. AWS KMS with Amazon S3 and SageMaker
  3. c. Wildcard * on all actions for everyone
  4. d. AWS CloudTrail

Architectural breakdown & explanation

Least-privilege IAM restricts model access.

Correct answer(s): a. IAM policies for bedrock:InvokeModel

Exam domain: Domain 5: Security, Compliance, and Governance for AI Solutions (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified AI Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.