MLS-C01 · Question #17
A Data Science team within a large company uses Amazon SageMaker notebooks to access data stored in Amazon S3 buckets. The IT Security team is concerned that internet-enabled notebook instances…
The correct answer is C. Associate the Amazon SageMaker notebook with a private subnet in a VPC. Ensure the VPC has. We must use the VPC endpoint (either Gateway Endpoint or Interface Endpoint)to comply with this requirement "Data communication traffic must stay within the AWS network". https://docs.aws.amazon.com/sagemaker/latest/dg/notebook-interface-endpoint.html
Question
A Data Science team within a large company uses Amazon SageMaker notebooks to access data stored in Amazon S3 buckets. The IT Security team is concerned that internet-enabled notebook instances create a security vulnerability where malicious code running on the instances could compromise data privacy. The company mandates that all instances stay within a secured VPC with no internet access, and data communication traffic must stay within the AWS network. How should the Data Science team configure the notebook instance placement to meet these requirements?
Options
- AAssociate the Amazon SageMaker notebook with a private subnet in a VPC. Place the Amazon
- BAssociate the Amazon SageMaker notebook with a private subnet in a VPC. Use IAM policies to
- CAssociate the Amazon SageMaker notebook with a private subnet in a VPC. Ensure the VPC has
- DAssociate the Amazon SageMaker notebook with a private subnet in a VPC. Ensure the VPC has
How the community answered
(20 responses)- A5% (1)
- B15% (3)
- C75% (15)
- D5% (1)
Explanation
We must use the VPC endpoint (either Gateway Endpoint or Interface Endpoint)to comply with this requirement "Data communication traffic must stay within the AWS network". https://docs.aws.amazon.com/sagemaker/latest/dg/notebook-interface-endpoint.html
Topics
Community Discussion
No community discussion yet for this question.