AWS Certified AI Practitioner (AIF-C01) — Question 12

A financial institution is using Amazon Bedrock to develop an AI application. The application is hosted in a VPC. To meet regulatory compliance standards, the VPC is not allowed access to any internet traffic.
Which AWS service or feature will meet these requirements?

Answer options

• A. AWS PrivateLink
• B. Amazon Macie
• C. Amazon CloudFront
• D. Internet gateway

Correct answer: A

Explanation

AWS PrivateLink enables private connectivity between VPCs and services without needing internet access, making it the correct choice for compliance. In contrast, Amazon Macie is focused on data security, Amazon CloudFront is a content delivery network that requires internet access, and an Internet gateway would allow internet traffic, which contradicts the VPC's requirements.