AIP-C01 practice question 13 of 15

A GenAI developer is evaluating Amazon Bedrock foundation models (FMs) to enhance a Europe- based company's internal business application. The…

Full set: 127 questions
A GenAI developer is evaluating Amazon Bedrock foundation models (FMs) to enhance a Europe- based company's internal business application. The company has a multi-account landing zone in AWS Control Tower. The company uses Service Control Policies (SCPs) to allow its accounts to use only the eu-north-1 and eu-west-1 Regions. All customer data must remain in private networks within the approved AWS Regions. The GenAI developer selects an FM based on analysis and testing and hosts the model in the eu- central-1 Region and the eu-west-3 Region. The GenAI developer must enable access to the FM for the company's employees. The GenAI developer must ensure that requests to the FM are private and remain within the same Regions as the FM. Which solution will meet these requirements?
Answer options
A: Deploy an AWS Lambda function that is exposed by a private Amazon API Gateway REST API to a VPC in eu-north-1. Create a VPC endpoint for the selected FM in eu-central-1 and eu-west-3. Extend existing SCPs to allow employees to use the FM. Integrate the REST API with the business application.
B: Deploy the FM on Amazon EC2 instances in eu-north-1. Deploy a private Amazon API Gateway REST API in front of the EC2 instances. Configure an Amazon Bedrock VPC endpoint. Integrate the REST API with the business application.
C: Configure the FM to use cross-Region inference through a Europe-scoped endpoint. Configure an Amazon Bedrock VPC endpoint. Extend existing SCPs to allow employees to use the FM through inference profiles in Europe-based Regions where the FM is available. Use an inference profile to integrate Amazon Bedrock with the business application. Correct answer
D: Deploy the FM in Amazon SageMaker in eu-north-1. Configure a SageMaker VPC endpoint. Extend existing SCPs to allow employees to use the SageMaker endpoint. Integrate the FM in SageMaker with the business application.
Correct Answer:
C. Configure the FM to use cross-Region inference through a Europe-scoped endpoint. Configure an Amazon Bedrock VPC endpoint. Extend existing SCPs to allow employees to use the FM through inference profiles in Europe-based Regions where the FM is available. Use an inference profile to integrate Amazon Bedrock with the business application.
Explanation

Europe-scoped cross-Region inference endpoints let Amazon Bedrock route requests only within EU Regions, satisfying data-residency rules while hiding Region complexity. Creating an Amazon Bedrock VPC endpoint ensures all traffic remains on private AWS networks. Extending the SCPs to permit access through approved inference profiles in eu-central-1 and eu-west-3 enables employee use while still restricting operations to EU Regions.

Why Incorrect

A. VPC interface endpoints are Region-bound; a Lambda in eu-north-1 cannot privately reach endpoints in other Regions.
B. Hosting the FM on EC2 removes Bedrock manageability and violates the “model already hosted” requirement.
D. Moving the model to SageMaker in eu-north-1 ignores the stated deployment in eu-central-1/eu-west-3 and requires retraining.

References

1. Amazon Bedrock Developer Guide

“Cross-Region inference and Europe-scoped endpoints” (2024-02-09 update).

2. AWS PrivateLink Guide

“Interface VPC endpoints for Amazon Bedrock keep data on the AWS network”.

3. AWS Control Tower Docs

“Using SCPs to allow additional Regions”

Section ‘Updating Region-allow lists’.

4. AWS re:Invent 2023 session ANT304

slides 31–34 – inference profiles & data residency in EU.

Keep practicing

Take the free AIP-C01 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other AIP-C01 practice questions

Scroll to Top