Rotating inference secrets | AWS Certified AI Practitioner (AIF-C01) original practice question

5.1Basic

An inference service uses an external model API secret.

Limit impact if it leaks.

Choose two practices.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

Detailed explanation

CorrectStore the secret in a managed service and retrieve it only when needed

Secrets stay out of source and logs.

CorrectRotate regularly, disable old values, limit readers, and monitor failures

The secret lifecycle is controlled.

IncorrectHard-code the secret in source for easy deployment

Leak response becomes difficult.

IncorrectKeep old values active forever after rotation

Compromise impact remains.

An example you can run in a temporary verification environment.

AWS公式AIF-C01 Domain 5.1のSecrets Manager、IAM、秘密ローテーションを確認する。

推論サービスの秘密を安全に保管・取得・更新・失効できる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-349

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20