AIP-C01 Domain 4: Security, Testing, and Governance for GenAI Applications

While troubleshooting latency, engineers determine they must apply least privilege to InvokeModel. Which action is appropriate? apply least privilege to InvokeModel.

Multiple choice — select one answer

Answer choices

  1. a. Structured adversarial testing
  2. b. Amazon Bedrock Guardrails
  3. c. IAM policies scoped to model ARNs
  4. d. KMS for CloudWatch Logs and S3

Architectural breakdown & explanation

Scope permissions to required models only.

Correct answer(s): c. IAM policies scoped to model ARNs

Exam domain: Domain 4: Security, Testing, and Governance for GenAI Applications (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Generative AI Developer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.