A model runtime contains libraries and custom code.
Track vulnerable dependencies.
Choose two practices.
Record versions and hashes for models, runtimes, libraries, containers, and configuration and track affected environments when vulnerabilities appear.
Detailed explanation
The affected set is reproducible.
The affected set is reproducible.
Dependency issues reach operations.
Dependency issues reach operations.
Runtime dependencies also create risk.
Runtime dependencies also create risk.
Behavior and compatibility can change.
Behavior and compatibility can change.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 5.3の依存関係、脆弱性、モデル供給網を確認する。Expected result
モデルの周辺部品を含めて、脆弱性と変更影響を追跡できる。Key points
- Dependencies
- Bill of materials
- Vulnerability response
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.