Combine an external model, embeddings, datasets, and open-source libraries.
Manage changes, vulnerabilities, and rights.
Choose two practices.
Inventory models, data, libraries, providers, versions, licenses, and SBOMs, and review vulnerabilities, updates, data terms, alternatives, and notifications.
Detailed explanation
Dependencies and changes are traceable.
Third-party changes are managed.
Third-party security and license terms still affect the system.
Unevaluated changes can affect quality, safety, or rights.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2の第三者リスク、モデルガバナンス、サプライチェーンを確認する。
Official references
What to confirm
AIを構成する外部依存も変更管理・脆弱性・権利の対象にできる。
Key points
- Dependencies
- SBOM
- Third-party risk
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
AI supply chain
The chain of internal and external models, data, libraries, tools, and providers used by an AI system.
SBOM
A software bill of materials listing components, versions, and dependencies.