Amazon
AIF-C01 · Question #244
A company has signed up for Amazon Bedrock access to build applications. The company wants to restrict employee access to specific models available on Amazon Bedrock. Which solution meets these…
The correct answer is A. Use AWS Identity and Access Management (IAM) policies to restrict model access. With IAM policies you can grant or deny Bedrock API actions scoped to specific model ARNs, ensuring employees can only invoke the exact models you authorize.
Submitted by rania.sa· Mar 30, 2026
Question
A company has signed up for Amazon Bedrock access to build applications. The company wants to restrict employee access to specific models available on Amazon Bedrock. Which solution meets these requirements?
Options
- AUse AWS Identity and Access Management (IAM) policies to restrict model access.
- BUse AWS Security Token Service (AWS STS) to generate temporary credentials for model use.
- CUse AWS Identity and Access Management (IAM) service roles to restrict model subscription.
- DUse Amazon Inspector to monitor model access.
How the community answered
(44 responses)- A70% (31)
- B9% (4)
- C5% (2)
- D16% (7)
Explanation
With IAM policies you can grant or deny Bedrock API actions scoped to specific model ARNs, ensuring employees can only invoke the exact models you authorize.
Topics
#AWS IAM policies#Amazon Bedrock#Access Control#AI model access
Community Discussion
No community discussion yet for this question.