5.1Basic
A batch job accesses S3 and an inference service.
Avoid long-lived keys and restrict permissions.
Choose two designs.
× Incorrect
Assign an IAM role with only required actions and resources, separate roles by purpose, and audit use and review permissions.
Detailed explanation
IncorrectEmbed long-lived keys in source code
Secrets can leak through code or logs.
IncorrectShare an administrator role across every job
One compromise enables broad access.
CorrectSeparate roles by purpose and review access logs and permissions
Blast radius and use can be tracked.
CorrectAssign an IAM role with only required actions and resources
Short-lived credentials and least privilege are used.
Check official documentation
Compare the following points with the official documentation.
AWS IAM公式のロール、最小権限、CloudTrailとAIF-C01 Domain 5.1を確認する。
Official references
What to confirm
AIワークロードの認証情報をロールと最小権限で管理できる。
Key points
- IAM role
- Short-lived credentials
- Least privilege
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
IAM role
An identity with permissions that a trusted user or AWS resource can assume.
Temporary credentials
Short-lived access keys issued for a limited session instead of stored permanent keys.
Question IDAWS-AIF-221
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue