Examtopics

AWS Certified Machine Learning - Specialty
  • Topic 1 Question 148

    A data scientist is using an Amazon SageMaker notebook instance and needs to securely access data stored in a specific Amazon S3 bucket. How should the data scientist accomplish this?

    • Add an S3 bucket policy allowing GetObject, PutObject, and ListBucket permissions to the Amazon SageMaker notebook ARN as principal.

    • Encrypt the objects in the S3 bucket with a custom AWS Key Management Service (AWS KMS) key that only the notebook owner has access to.

    • Attach the policy to the IAM role associated with the notebook that allows GetObject, PutObject, and ListBucket operations to the specific S3 bucket.

    • Use a script in a lifecycle configuration to configure the AWS CLI on the instance with an access key ID and secret.


    シャッフルモード