mediumMultiple ChoiceObjective-mapped
AIF-C01 Practice Question: Ensure that only approved machine learning models…
A company wants to ensure that only approved machine learning models are deployed to production on Amazon SageMaker. Which combination of services can enforce this governance requirement?
⚠ Common exam trap
A common mix-up: candidates confuse monitoring/auditing services (like CloudTrail and CloudWatch) with enforcement mechanisms, failing to recognize that only AWS Config rules combined with IAM policies can actively prevent or flag non-compliant deployments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Config custom rules and AWS IAM policies
AWS Config custom rules can evaluate SageMaker model deployment configurations against defined policies (e.g., requiring models to be from an approved registry), and AWS IAM policies can restrict who can create or update endpoints, together enforcing that only approved ML models are deployed. This combination provides both continuous compliance checking and access control, directly addressing the governance requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS CodePipeline and Amazon CodeGuru
Why it's wrong here
CodePipeline automates CI/CD, CodeGuru reviews code; they don't directly enforce model approval.
- ✗
Amazon CloudWatch Events and AWS CloudTrail
Why it's wrong here
These are for monitoring and auditing, not for enforcement.
- ✗
AWS Organizations and AWS Artifact
Why it's wrong here
Organizations manage accounts, Artifact provides compliance reports; they don't enforce model approval.
- ✓
AWS Config custom rules and AWS IAM policies
Why this is correct
Config can evaluate tags on models, IAM can restrict deployment to roles that can only deploy approved models.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 619 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.