AIF-C01 Practice Question: Security, Compliance, and Governance for AI Solutions
A company uses AWS Lake Formation to govern data used for AI/ML. They have a data lake containing customer transaction data. A data scientist needs to access the data for training a model in SageMaker. Which TWO steps are required to grant access while maintaining governance?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Register the SageMaker execution role as a Lake Formation principal and grant it the necessary permissions
Lake Formation requires that the data scientist's IAM role be granted SELECT permission on the database/table. Additionally, the SageMaker execution role needs access to the data, and Lake Formation integration requires the role to have Lake Formation permissions. Just granting IAM permissions without Lake Formation or vice versa will not work.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable Lake Formation and use S3 bucket policies only
Why it's wrong here
Lake Formation is the governance tool; disabling it would remove fine-grained controls.
- ✓
Register the SageMaker execution role as a Lake Formation principal and grant it the necessary permissions
Why this is correct
The SageMaker role must be authorized in Lake Formation to access the data.
- ✓
Grant the data scientist's IAM role SELECT permission on the relevant database and tables in Lake Formation
Why this is correct
Lake Formation permissions control access to the data.
- ✗
Modify the S3 bucket policy to allow public access
Why it's wrong here
Public access would violate governance.
- ✗
Create an IAM policy that allows the SageMaker execution role to access all S3 buckets
Why it's wrong here
This would bypass Lake Formation's governance.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 619 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.