Security, Compliance, and Governance for AI Solutions
IAM and Least Privilege
AI applications still need standard AWS identity and access controls. AIF-C01 expects least-privilege roles, temporary credentials, separation of duties, and resource policy review for models, data, and supporting services.
Concepts
- IAM policies, roles, and resource policies should grant only the permissions needed.
- Separate duties for data access, model deployment, monitoring, and administration when appropriate.
- Temporary credentials and role-based access reduce long-lived secret exposure.
Exam tips
- Grant only the actions and resources an application needs.
- Use IAM roles and temporary credentials instead of long-lived secrets.
- Separate duties for data access, deployment, monitoring, and administration when needed.