Exam AWS Certified Machine Learning - Specialty topic 1 question 275 discussion

Exam question from Amazon's AWS Certified Machine Learning - Specialty

Question #: 275
Topic #: 1

[All AWS Certified Machine Learning - Specialty Questions]

A machine learning (ML) engineer has created a feature repository in Amazon SageMaker Feature Store for the company. The company has AWS accounts for development, integration, and production. The company hosts a feature store in the development account. The company uses Amazon S3 buckets to store feature values offline. The company wants to share features and to allow the integration account and the production account to reuse the features that are in the feature repository.

Which combination of steps will meet these requirements? (Choose two.)

A. Create an IAM role in the development account that the integration account and production account can assume. Attach IAM policies to the role that allow access to the feature repository and the S3 buckets.
B. Share the feature repository that is associated the S3 buckets from the development account to the integration account and the production account by using AWS Resource Access Manager (AWS RAM).
C. Use AWS Security Token Service (AWS STS) from the integration account and the production account to retrieve credentials for the development account.
D. Set up S3 replication between the development S3 buckets and the integration and production S3 buckets.
E. Create an AWS PrivateLink endpoint in the development account for SageMaker.

Show Suggested Answer

Suggested Answer: AB 🗳️

by usamazubairi at Dec. 14, 2023, 3:28 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

xiaoeason

Highly Voted 1 year, 4 months ago

Selected Answer: AB

A: By creating an IAM role in the development account that the integration and production accounts can assume, you establish a trust relationship between the accounts. You can attach IAM policies to the role that grant the necessary permissions to access the feature repository and S3 buckets. B: AWS Resource Access Manager (AWS RAM) enables resource sharing across AWS accounts. By sharing the feature repository associated with the S3 buckets using AWS RAM, you allow the integration and production accounts to access and reuse the features.

upvoted 6 times

...

Certified101

Most Recent 1 month, 4 weeks ago

Selected Answer: AB

AB B- its not saying to share the S3 bucket using RAM, it saying to share the Feature repository (that is associated to the bucket) - https://docs.aws.amazon.com/ram/latest/userguide/shareable.html

upvoted 1 times

...

ciscochamps

4 months, 4 weeks ago

Selected Answer: AC

B- is definitely incorrect, you can't share an S3 bucket using RAM

upvoted 1 times

...

rzukowski

1 year ago

Selected Answer: AC

A - cross account access C - use STS to get credentials and assume IAM role from different account (https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) B is incorrect - RAM can be used only in AWS Organizations (which is not mentioned in question), also only Amazon S3 on Outposts can be shared using RAM

upvoted 4 times

...

usamazubairi

1 year, 4 months ago

A & B Create an IAM role in the dev account and share the features repository using AWS RAM

upvoted 3 times

...

Exam AWS Certified Machine Learning - Specialty All Questions

View all questions & answers for the AWS Certified Machine Learning - Specialty exam