Security, Compliance, and Governance for AI Solutions
Encryption and Network Security
Encryption and private connectivity protect prompts, responses, training data, model artifacts, and retrieval sources. Know when to use KMS, TLS, VPC endpoints, PrivateLink, security groups, and endpoint policies.
Concepts
- Encrypt sensitive data at rest with AWS managed keys or customer managed KMS keys.
- Use TLS for encryption in transit.
- VPC endpoints and AWS PrivateLink can keep supported service traffic off the public internet.
- Security groups, subnet placement, and endpoint policies can reduce network exposure.
Exam tips
- Use KMS keys for encryption at rest and TLS for encryption in transit.
- AWS PrivateLink and VPC endpoints can keep supported service traffic off the public internet.
- Endpoint policies and security groups reduce network and service exposure.