A company is using Amazon Bedrock to generate images from text prompts. They need to ensure the generated images do not contain offensive content. Which feature should be enabled?
Bedrock's content moderation uses AI to detect and block offensive content.
Why this answer
Amazon Bedrock's content moderation with AI feature allows you to filter generated images for offensive or inappropriate content by applying predefined or custom moderation policies. This is the correct choice because it directly addresses the requirement to ensure generated images do not contain offensive material, leveraging machine learning models to detect and block such content at inference time.
Exam trap
The trap here is that candidates may confuse network-level or access-control services (like VPC endpoints, WAF, or IAM policies) with content-level filtering, assuming they can be repurposed for moderation, but only Bedrock's built-in content moderation feature directly analyzes and filters generated image content.
How to eliminate wrong answers
Option A is wrong because VPC endpoints are used to privately connect your VPC to AWS services without traversing the public internet, and they do not provide any content filtering or moderation capabilities for generated images. Option B is wrong because AWS WAF is a web application firewall that protects web applications from common exploits like SQL injection and cross-site scripting, but it operates at the HTTP/HTTPS request layer and cannot inspect or moderate the content of images generated by Bedrock. Option D is wrong because IAM policies control access permissions to AWS resources, such as who can invoke Bedrock models, but they do not inspect or filter the actual content of generated outputs.