ExamPark
Course menuAIP-C01

Exams / AIP-C01 / Secure access to models and data (federation, RBAC, least privilege) / Question 1

AIP-C01 practice question: Secure access to models and data (federation, RBAC, least privilege)

Implementation and Integration A free question from our original AIP-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A consulting firm runs its generative AI platform in one AWS account. Several teams build internal assistants on Amazon Bedrock, and each team's workloads run under its own IAM role. The marketing team's role must use only three approved foundation models, one text model and two embedding models, which the firm's risk committee has reviewed.

The firm does not want separate AWS accounts for each team, and the restriction must hold for any caller that assumes the marketing role, including code that calls the SDK directly. A new team must not inherit the marketing role's access.

The platform team wants the tightest control at the IAM layer.

Which policy design meets these requirements?

Choose one answer.

  1. A. Attach the AWS managed policy for full Amazon Bedrock access to the marketing role, and rely on the assistant's code to call only the three approved model IDs.
  2. B. Create a separate AWS account for the marketing team, and let that account's role invoke only the models enabled in that account, with no policy changes in the shared account.
  3. C. Grant bedrock:InvokeModel and bedrock:InvokeModelWithResponseStream only on the ARNs of the three approved foundation models, with no statement for other models.
  4. D. Put an Amazon API Gateway REST API in front of Amazon Bedrock, and use a Lambda authorizer that reads the model ID from each request body and allows only the approved models.
Show the answer and explanation

Answer: C

  • A. Wrong: Full access lets any caller invoke any model, so the restriction depends on application code that can be changed or bypassed. This fails the requirement that the restriction hold for any caller of the role.
  • B. Wrong: Separate accounts can limit models, but the firm wants to avoid per-team accounts. The shared account would also keep its wider access for other roles, so the team's boundary is not enforced there.
  • C. Right: IAM denies any model whose ARN is not granted, so every caller of the role is limited to the approved models. The policy stays in the shared account and is not inherited by other teams' roles. Learn more: Identity-based policy examples for Amazon Bedrock (opens in a new tab)
  • D. Wrong: The gateway checks requests only when callers use it, so a direct call with the marketing role to Amazon Bedrock is not limited. The custom authorizer also adds code the platform team must maintain.

Explanation

Listing only the approved model ARNs in the IAM policy makes every other model denied by default, for any caller that assumes the marketing role. Separate accounts, full-access policies with code checks and a gateway in front of the service each leave a path around the restriction or add work the firm wants to avoid.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free AIP-C01 practice examPractice Secure access to models and data (federation, RBAC, least privilege)All Secure access to models and data (federation, RBAC, least privilege) questions

Want more on Secure access to models and data (federation, RBAC, least privilege)? The 5 full-length practice sets have 5 more Secure access to models and data (federation, RBAC, least privilege) questions, 375 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets