MLS-C01 · Question #77
A Machine Learning Specialist at a company sensitive to security is preparing a dataset for model training. The dataset is stored in Amazon S3 and contains Personally Identifiable Information (PII)…
The correct answer is A. Create a VPC endpoint and apply a bucket access policy that restricts access to the given VPC. You can control which VPCs or VPC endpoints have access to your buckets by using Amazon S3 bucket policies. For examples of this type of bucket policy access control, see the following topics on restricting access…
Question
A Machine Learning Specialist at a company sensitive to security is preparing a dataset for model training. The dataset is stored in Amazon S3 and contains Personally Identifiable Information (PII). The dataset:
- Must be accessible from a VPC only.
- Must not traverse the public internet.
How can these requirements be satisfied?
Options
- ACreate a VPC endpoint and apply a bucket access policy that restricts access to the given VPC
- BCreate a VPC endpoint and apply a bucket access policy that allows access from the given VPC
- CCreate a VPC endpoint and use Network Access Control Lists (NACLs) to allow traffic between
- DCreate a VPC endpoint and use security groups to restrict access to the given VPC endpoint and
How the community answered
(29 responses)- A72% (21)
- B17% (5)
- C3% (1)
- D7% (2)
Explanation
You can control which VPCs or VPC endpoints have access to your buckets by using Amazon S3 bucket policies. For examples of this type of bucket policy access control, see the following topics on restricting access. https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies-vpc-endpoint.html
Topics
Community Discussion
No community discussion yet for this question.