nerdexam
Amazon

MLS-C01 · Question #21

A company is setting up an Amazon SageMaker environment. The corporate data security policy does not allow communication over the internet. How can the company enable the Amazon SageMaker service…

The correct answer is C. Create Amazon SageMaker VPC interface endpoints within the corporate VPC. The VPC interface endpoint connects your VPC directly to the Amazon SageMaker API or Runtime without an internet gateway, NAT device, VPN connection, or AWS Direct Connect https://docs.aws.amazon.com/sagemaker/latest/dg/interface-vpc-endpoint.html

ML Implementation and Operations

Question

A company is setting up an Amazon SageMaker environment. The corporate data security policy does not allow communication over the internet. How can the company enable the Amazon SageMaker service without enabling direct internet access to Amazon SageMaker notebook instances?

Options

  • ACreate a NAT gateway within the corporate VPC.
  • BRoute Amazon SageMaker traffic through an on-premises network.
  • CCreate Amazon SageMaker VPC interface endpoints within the corporate VPC.
  • DCreate VPC peering with Amazon VPC hosting Amazon SageMaker.

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    14% (8)
  • C
    77% (43)
  • D
    4% (2)

Explanation

The VPC interface endpoint connects your VPC directly to the Amazon SageMaker API or Runtime without an internet gateway, NAT device, VPN connection, or AWS Direct Connect https://docs.aws.amazon.com/sagemaker/latest/dg/interface-vpc-endpoint.html

Topics

#VPC Endpoints#AWS PrivateLink#Network Security#SageMaker Networking

Community Discussion

No community discussion yet for this question.

Full MLS-C01 Practice