SAP-C03 practice question: Responsible AI controls (Bedrock Guardrails, AgentCore Identity, human approval) (2 of 2)

Security, Compliance, and Governance A free question from our original SAP-C03 practice exam. Try it, then open the answer to see why each option is right or wrong.

A car maker runs a customer-service agent on Amazon Bedrock that can issue service credits to owners. The agent may issue credits of up to 500 USD on its own, but larger credits need a human approver. The agent calls the dealer systems on behalf of the owner who is signed in, and the owner's access must not extend to other owners' records.

Auditors need a record of every prompt and response, including the model calls the agent makes while planning its tool use.

Which THREE designs meet these requirements? (Choose three.)

Choose three answers.

A. Route credits above 500 USD through an AWS Step Functions workflow that pauses on a task token, and let the approver's tool return the token to resume the workflow when the approver decides.
B. Give the agent an IAM role that can read and write every owner's records in the dealer systems, and have the prompt tell the model to act only for the signed-in owner.
C. Record only the agent's final answer in the application's log group, because the auditors need the replies the owners received and not the planning steps.
D. Enable model invocation logging for the agent's model calls, with prompts and responses delivered to a protected log group that the audit team can read.
E. Use Amazon Bedrock AgentCore Identity to give the agent a scoped OAuth token for the signed-in owner, and have each tool call the dealer systems with that token.
F. Use the CloudTrail entries for the agent's Bedrock API calls as the audit record, because CloudTrail logs every model invocation that the agent makes in the account.

Show the answer and explanation

Answers: A, D, E

A. Right: Correct. A paused Step Functions workflow holds the larger credit until a person approves it, and the approval is recorded in the execution history. The agent cannot issue the credit on its own.
B. Wrong: A prompt is not an access control, and the role would let the agent reach any owner's records. This design breaks the rule that owners see only their own records.
C. Wrong: The planning calls and tool requests are part of what the auditors need, and a log of final answers alone misses them. This option does not provide the full prompt and response record.
D. Right: Correct. Model invocation logging records the inputs and outputs of each model call, which gives the auditors the prompt and response record. Protecting the log group limits who can change it.
E. Right: Correct. Each call carries a token limited to the signed-in owner, so the dealer systems enforce the owner boundary on every request. The agent holds no broad standing credentials.
F. Wrong: CloudTrail records who called which API and when, but not the prompt and response bodies. Model invocation logging is the feature that captures the inputs and outputs the auditors need.

Explanation

A Step Functions task-token workflow holds larger credits for human approval, AgentCore Identity limits each call to the signed-in owner, and model invocation logging keeps the prompt and response record. Broad roles, final-answer-only logs and CloudTrail entries without the prompt content each leave one requirement unmet.

SAP-C03 practice question: Responsible AI controls (Bedrock Guardrails, AgentCore Identity, human approval) (2 of 2)

Explanation

Study

Keep practicing