MLA-C01 · Question #171
A company deployed an Amazon SageMaker AI ML model to an endpoint by calling the CreateModel API operation. The network that was established with the API call includes two private subnets and one secu
Sign in or unlock MLA-C01 to reveal the answer and full explanation for question #171. The question stem and answer options stay visible for context.
Question
A company deployed an Amazon SageMaker AI ML model to an endpoint by calling the CreateModel API operation. The network that was established with the API call includes two private subnets and one security group. The model must download data from an Amazon S3 bucket and must upload data to the S3 bucket. The traffic to the S3 bucket must not travel across the internet. Which solution will meet these requirements?
Options
- ACreate a NAT gateway. Configure the security group to allow outbound connections. Configure
- BCreate a gateway VPC endpoint. Configure an endpoint policy that restricts access to the S3
- CCreate an interface VPC endpoint. Verify that the security group allows only inbound connections.
- DCreate a Gateway Load Balancer VPC endpoint. Configure an IAM policy that restricts access to
Unlock MLA-C01 to see the answer
You've previewed enough free MLA-C01 questions. Unlock MLA-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.