Cert Master

AIP-C01 Domain 4: Security, Testing, and Governance for GenAI Applications

What is the MOST appropriate AWS solution to apply least privilege to InvokeModel?

Multiple choice — select one answer

Answer choices

  1. a. Structured adversarial testing
  2. b. IAM policies scoped to model ARNs
  3. c. Amazon Bedrock Guardrails
  4. d. Bedrock Regions and VPC endpoints

Architectural breakdown & explanation

Scope permissions to required models only.

Correct answer(s): b. IAM policies scoped to model ARNs

Exam domain: Domain 4: Security, Testing, and Governance for GenAI Applications (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Generative AI Developer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications