5.1Standard
Only an internal application may call an inference endpoint.
Track users and service-to-service operations.
Choose two designs.
× Incorrect
Use short-lived service credentials and least privilege, and log user, app, model, and action while authorizing internal calls.
Detailed explanation
IncorrectDistribute an administrator key to clients
Broad privilege can leak.
CorrectLog user, application, model, and action and enforce endpoint authorization
Internal calls remain attributable and controlled.
IncorrectTrust every caller on the internal network
A compromised internal actor can misuse the endpoint.
CorrectUse an IAM role or other short-lived service credential
Long-lived secrets are not spread to callers.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.1のIAM、推論エンドポイント、監査を確認する。
Official references
What to confirm
ネットワーク内の通信も認証・認可・監査が必要な理由を説明できる。
Key points
- Short-lived credentials
- Authorization
- Audit
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Service-to-service authentication
Verifying one application or AWS service when it calls another service.
Zero trust
A security approach that verifies identity, device, context, and operation instead of trusting network location.
Question IDAWS-AIF-249
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue