5.2Standard
Data scientists, operators, and vendors share a platform.
Separate read and export rights.
Choose two designs.
× Incorrect
Separate access to source, masked data, features, models, and outputs and audit reads, exports, permission changes, failures, review, and revocation.
Detailed explanation
CorrectSeparate principals and operations for source, masked data, features, models, and outputs
Only necessary access is granted.
Only necessary access is granted.
CorrectAudit reads, exports, permission changes, and failures and perform reviews and revocation
Misuse is traceable.
Misuse is traceable.
IncorrectEvery model developer needs unrestricted source and output access
Least privilege is violated.
Least privilege is violated.
IncorrectSkip permission-change logging because audit data grows
Privilege abuse is hidden.
Privilege abuse is hidden.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 5.2のデータアクセス、IAM、監査を確認する。Expected result
モデル開発の利便性と、原本・出力の最小権限を分離できる。Key points
- Data access
- Least privilege
- Audit
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.
Question IDAWS-AIF-507
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue