MLA-C01 Practice Question: ML Solution Monitoring, Maintenance, and Security
A company wants to allow a SageMaker model in one AWS account to be accessed by a different AWS account for inference. They need to maintain security and compliance. Which approach meets the requirement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Attach a resource-based policy to the SageMaker endpoint that grants the other account's IAM role invoke permissions
Cross-account access can be achieved by using resource-based policies on the SageMaker model or endpoint, combined with appropriate IAM roles in the consuming account.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AWS PrivateLink to expose the SageMaker endpoint privately and grant access via security groups
Why it's wrong here
PrivateLink enables VPC access but does not handle cross-account authorization; IAM/resource policies are needed.
- ✓
Attach a resource-based policy to the SageMaker endpoint that grants the other account's IAM role invoke permissions
Why this is correct
Resource-based policies allow cross-account access to the endpoint. The other account's IAM role must have sts:AssumeRole or be allowed by the policy.
- ✗
Create an IAM role in the source account and share the role ARN with the target account
Why it's wrong here
Sharing a role ARN does not grant access; the target account would need to assume that role, which requires cross-account trust policies.
- ✗
Share the model artifacts via an S3 bucket with cross-account bucket policies and let the other account deploy independently
Why it's wrong here
This does not allow direct inference access to the endpoint; the other account would need to deploy its own copy.
Go deeper
Related to this question
About these practice questions
One of 835 original MLA-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.