Topic 1 Question 108
A company shares Amazon SageMaker Studio notebooks that are accessible through a VPN. The company must enforce access controls to prevent malicious actors from exploiting presigned URLs to access the notebooks.
Which solution will meet these requirements?
Set up Studio client IP validation by using the aws:sourceIp IAM policy condition.
Set up Studio client VPC validation by using the aws:sourceVpc IAM policy condition.
Set up Studio client role endpoint validation by using the aws:PrimaryTag IAM policy condition.
Set up Studio client user endpoint validation by using the aws:PrincipalTag IAM policy condition.
ユーザの投票
コメント(1)
- 正解だと思う選択肢: B
If you apply IP restrictions, it may not be possible to properly control access via dynamic IP addresses or proxies, so the correct answer is probably B.
👍 2ryuhei2025/03/05
シャッフルモード