AWS Certified AI Practitioner AIF-C01 Practice Question
To give an Amazon SageMaker notebook instance temporary permission to read objects in one S3 bucket without storing long-term credentials on the instance, which IAM feature should you use?
Add the notebook instance to an IAM group that allows s3:GetObject
Configure an IAM user access key as environment variables on the notebook
Attach an IAM role with a bucket-specific permissions policy to the notebook instance
Apply a service control policy (SCP) that permits the required S3 actions
An IAM role is designed to be assumed by AWS services such as a SageMaker notebook instance. When the instance starts, it receives temporary credentials associated with the role, enabling it to call S3 actions (for example, s3:GetObject) defined in the attached policy. No static keys are stored on the server. An IAM group cannot be assumed by a service; it only aggregates users. Storing an IAM user's access key inside the notebook embeds long-term credentials, which is discouraged. Service control policies apply at the organization or account level and do not grant permissions to a specific service instance.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are IAM roles, and why are they better than storing static IAM user credentials?
Open an interactive chat with Bash
How does an IAM role grant temporary credentials to a SageMaker notebook instance?
Open an interactive chat with Bash
What is the difference between an IAM role and an IAM group?
Open an interactive chat with Bash
AWS Certified AI Practitioner AIF-C01
Security, Compliance, and Governance for AI Solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .