CertBrain
Courses
Home
Blog
Sign in
← Securing AI Workloads on AWS
1 / 11
Question
A company's data analysts should be able to invoke one approved foundation model in Amazon Bedrock and no other model. Which approach follows AWS's least-privilege guidance?
1
Attach the AmazonBedrockFullAccess managed policy to the analysts' role
2
Create a Bedrock guardrail that blocks requests naming other models
3
Allow InvokeModel on only the approved model's ARN
4
Create an interface VPC endpoint so analysts reach Bedrock privately
Press 1–4 to pick an answer
CertBrain