5.2Standard
A VPC application calls an AI service.
Avoid the public internet.
Choose two designs.
× Incorrect
Configure endpoint, route, DNS, security group, and endpoint policy and test TLS, IAM, logs, and egress control.
Detailed explanation
IncorrectPrivate routing removes the need for IAM and encryption
Network isolation does not authenticate.
IncorrectAllow every subnet and service to use the endpoint
Reach is too broad.
CorrectTest TLS, IAM, logging, name resolution, and egress control
Isolation is not the only control.
CorrectConfigure endpoint, route, DNS, security group, and endpoint policy
Reachability is constrained.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のVPCエンドポイント、IAM、TLS、ネットワーク制御を確認する。
Official references
What to confirm
ネットワーク隔離と認証・暗号化・出口制御を重ねて設計できる。
Key points
- VPC endpoint
- Egress
- IAM
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
VPC endpoint
A private network entry point for reaching a supported AWS service.
Egress control
Rules that restrict outbound traffic from a workload or network.
Question IDAWS-AIF-516
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue