AIP-C01 · Question #14
A company is developing a generative AI (GenAI) application by using Amazon Bedrock. The application will analyze patterns and relationships in the company's data. The application will process…
The correct answer is C. Use Amazon S3 Object Lock with Region-specific S3 bucket policies. Pre-process the data points. This scenario requires strict data residency, regional processing, classification, and auditable decision trails, which Option C addresses using AWS-native governance services. Region-specific Amazon S3 buckets enforce geographic data boundaries. Amazon S3 Object Lock ensures…
Question
A company is developing a generative AI (GenAI) application by using Amazon Bedrock. The application will analyze patterns and relationships in the company's data. The application will process millions of new data points daily across AWS Regions in Europe, North America, and Asia before storing the data in Amazon S3. The application must comply with local data protection and storage regulations. Data residency and processing must occur within the same continent. The application must also maintain audit trails of the application's decision-making processes and provide data classification capabilities. Which solution will meet these requirements?
Options
- ADeploy the application in each Region with local IAM policies. Use Amazon Bedrock cross-Region
- BUse SCPs with AWS Organizations to manage location-specific permissions. Use AWS
- CUse Amazon S3 Object Lock with Region-specific S3 bucket policies. Pre-process the data points
- DCreate separate AWS accounts for each Region with individual compliance frameworks. Use
How the community answered
(20 responses)- A5% (1)
- B15% (3)
- C75% (15)
- D5% (1)
Explanation
This scenario requires strict data residency, regional processing, classification, and auditable decision trails, which Option C addresses using AWS-native governance services. Region-specific Amazon S3 buckets enforce geographic data boundaries. Amazon S3 Object Lock ensures immutability of stored data and logs, supporting regulatory retention and non- repudiation requirements. Pre-processing data within the same Region before invoking Amazon Bedrock ensures that inference and data handling do not cross continental boundaries. Amazon Macie provides managed, automated data classification for sensitive data types such as PII and financial records, fulfilling the classification requirement without custom tooling. AWS CloudTrail immutable logs provide comprehensive audit trails of all API calls, model invocations, and data access events, ensuring traceability of AI decision-making processes.
Topics
Community Discussion
No community discussion yet for this question.