5.2Standard
Data scientists, operators, and vendors share a platform.
Separate read and export rights.
Choose two designs.
× Incorrect
Separate access to source, masked data, features, models, and outputs and audit reads, exports, permission changes, failures, review, and revocation.
Detailed explanation
CorrectAudit reads, exports, permission changes, and failures and perform reviews and revocation
Misuse is traceable.
IncorrectEvery model developer needs unrestricted source and output access
Least privilege is violated.
CorrectSeparate principals and operations for source, masked data, features, models, and outputs
Only necessary access is granted.
IncorrectSkip permission-change logging because audit data grows
Privilege abuse is hidden.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のデータアクセス、IAM、監査を確認する。
Official references
What to confirm
モデル開発の利便性と、原本・出力の最小権限を分離できる。
Key points
- Data access
- Least privilege
- Audit
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Data-layer separation
Keeping source, transformed, feature, model, and output stores under distinct controls.
Access audit
A record and review of who accessed or changed protected data.
Question IDAWS-AIF-507
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue