AIF-C01 Question 66

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A2

  Create an Amazon Bedrock custom service role for each team that has access to only the team's customer data. This follows the principle of least privilege — each team gets a dedicated service role that Bedrock assumes, and that role's IAM policy restricts S3 access to only that team's customer data prefix/folder. This ensures data isolation at the service level.

• Chose A1

  I would say C is incorrect because it doesn't follow least privilege security. The single Bedrock role is a weak point and provides more access than is necessary

• Chose A1

  Ais the correct answer