nerdexam
Amazon

AIF-C01 · Question #2

A security company is using Amazon Bedrock to run foundation models (FMs). The company wants to ensure that only authorized users invoke the models. The company needs to identify any unauthorized…

The correct answer is B. AWS CloudTrail. AWS CloudTrail is a service that enables governance, compliance, and operational and risk auditing of your AWS account. It tracks API calls and identifies unauthorized access attempts to AWS resources, including Amazon Bedrock.

Submitted by hassan_iq· Mar 30, 2026Security

Question

A security company is using Amazon Bedrock to run foundation models (FMs). The company wants to ensure that only authorized users invoke the models. The company needs to identify any unauthorized access attempts to set appropriate AWS Identity and Access Management (IAM) policies and roles for future iterations of the FMs. Which AWS service should the company use to identify unauthorized users that are trying to access Amazon Bedrock?

Options

  • AAWS Audit Manager
  • BAWS CloudTrail
  • CAmazon Fraud Detector
  • DAWS Trusted Advisor

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    79% (23)
  • C
    3% (1)
  • D
    14% (4)

Explanation

AWS CloudTrail is a service that enables governance, compliance, and operational and risk auditing of your AWS account. It tracks API calls and identifies unauthorized access attempts to AWS resources, including Amazon Bedrock.

Topics

#AWS CloudTrail#Security logging#Unauthorized access detection#IAM

Community Discussion

No community discussion yet for this question.

Full AIF-C01 Practice