5.2Standard
Teams have access to models, data, and tools.
Remove excess access after transfers.
Choose two practices.
× Incorrect
Review identity, purpose, expiry, and last use regularly, linking owner approval, logs, revocation, rotation, and emergency disablement.
Detailed explanation
IncorrectLogs eliminate the need for approval and revocation
Detection alone does not control access.
CorrectReview identity, purpose, expiry, and last use for users, services, and tools
Unused access is found.
CorrectLink owner approval, access logs, revocation, rotation, and emergency disablement
Changes remain controlled.
IncorrectNever expire AI permissions to reduce operations
Excess access remains.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のIAM、最小権限、アクセスレビューを確認する。
Official references
What to confirm
AIデータとツールの過剰権限を発見し、承認・失効まで運用できる。
Key points
- Access review
- Least privilege
- Revocation
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Access review
A recurring assessment of whether permissions remain necessary and appropriate.
Permission expiry
A time after which an authorization is automatically or manually removed.
Question IDAWS-AIF-451
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue