AWS Certified AI Practitioner (AIF-C01) — Question 209

A company has signed up for Amazon Bedrock access to build applications. The company wants to restrict employee access to specific models available on Amazon Bedrock.

Which solution meets these requirements?

Answer options

• A. Use AWS Identity and Access Management (IAM) policies to restrict model access.
• B. Use AWS Security Token Service (AWS STS) to generate temporary credentials for model use.
• C. Use AWS Identity and Access Management (IAM) service roles to restrict model subscription.
• D. Use Amazon Inspector to monitor model access.

Correct answer: A

Explanation

The correct answer is A because AWS Identity and Access Management (IAM) policies can be used to define fine-grained permissions, allowing the company to restrict access to specific models. Options B and C do not provide the necessary functionality for restricting model access directly, while option D is focused on monitoring rather than access control.