A health insurer is building a claims-summary assistant on Amazon Bedrock. Claim notes contain medical details, so the compliance team must confirm before launch that a model provider cannot read the company's prompts or the model's replies.
The team does not want to build its own pipeline to prove this, and the design must use managed AWS services only.
Which approach meets these requirements?
Choose one answer.
AA. Turn on model invocation logging to an S3 bucket, and give each model provider read access to the bucket so it can review how its model is used.
BB. Ask each model provider to sign a data processing agreement, then send the claim notes to that provider's own API endpoint instead of Amazon Bedrock.
CC. Run an open-source model on Amazon EC2 in the company's own account, and patch and operate the model server in a private subnet with its own logging and access controls.
DD. Call the models through Amazon Bedrock, which runs them in Bedrock-owned deployment accounts. Providers have no access to Bedrock logs or to customer prompts.
Show the answer and explanation
Answer: D
A. Wrong: This gives the providers direct access to customer prompts and completions, which is the exposure the compliance team must rule out. It also adds a custom review path.
B. Wrong: Sending claim notes to a provider's own endpoint takes them out of Amazon Bedrock, which breaks the managed-service requirement. A contract does not replace the technical control the team needs.
C. Wrong: Self-hosting avoids model providers, but the team would have to run and patch the model itself. That conflicts with the requirement to use managed AWS services only.
D. Right: Correct. Bedrock runs the models in deployment accounts that the Bedrock service team owns and operates, and the model providers have no access to those accounts, to Bedrock logs or to customer prompts and completions. The team needs no extra pipeline for this control. Learn more: Data protection in Amazon Bedrock (opens in a new tab)
Explanation
Amazon Bedrock runs each provider's models in deployment accounts owned and operated by the Bedrock service team. Model providers have no access to those accounts, to Bedrock logs or to customer prompts and completions. The other options either send the data to a provider or add infrastructure the team would have to build and run.
Want more on AI service access and data privacy? The 5 full-length practice sets have 11 more AI service access and data privacy questions, 390 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets →