A Machine Learning Specialist at a company sensitive to security is preparing a dataset for model training. The dataset is stored in Amazon S3 and contains Personally Identifiable Information (PII). The dataset: Must be accessible from a VPC only. Must not traverse the public internet. How can these requirements be satisfied?
A) Create a VPC endpoint and apply a bucket access policy that restricts access to the given VPC endpoint and the VPC.
B) Create a VPC endpoint and apply a bucket access policy that allows access from the given VPC endpoint and an Amazon EC2 instance.
C) Create a VPC endpoint and use Network Access Control Lists (NACLs) to allow traffic between only the given VPC endpoint and an Amazon EC2 instance.
D) Create a VPC endpoint and use security groups to restrict access to the given VPC endpoint and an Amazon EC2 instance

Question

Quizplus · Accepted Answer

A VPC endpoint is a network interface that allows resources in a VPC to securely connect to services hosted outside of the VPC. By creating a VPC endpoint for Amazon S3, the Machine Learning Specialist can ensure that the dataset is only accessible from within the VPC. Additionally, by applying a bucket access policy that restricts access to the given VPC endpoint and the VPC, the Specialist can further ensure that the dataset is not accessible from the public internet.

A Machine Learning Specialist at a Company Sensitive to Security