IAM for SageMaker Quiz

Quiz covering ML Security

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which AWS service is used to manage permissions for Amazon SageMaker, allowing you to control who can create, update, or delete machine learning models?

2. 2

   You want to grant a SageMaker notebook instance permission to access an S3 bucket to read training data. What is the recommended way to achieve this?

3. 3

   When configuring a SageMaker Training Job, why should you avoid using a broad 'AdministratorAccess' policy for the service execution role?

4. 4

   If you are running a SageMaker training job inside a VPC, what specific IAM permission must be included in the execution role to allow the job to communicate with your VPC resources?

5. 5

   An administrator needs to allow a developer to create a SageMaker endpoint using a specific IAM role. The developer has the 'sagemaker:CreateModel' and 'sagemaker:CreateEndpoint' permissions, but the call fails with an 'AccessDenied' error. What is likely missing?