Skip to content

AIP-C01 · Study Guide

← Domain 3: AI Safety, Security, and Governance

3.2.1 · Lesson 6 of 15

Protected AI Environments & Network Isolation

Isolate GenAI infrastructure from the public internet using PrivateLink, endpoint policies, and customer-managed encryption keys.

WHAT

Ensure GenAI infrastructure is isolated from the public internet and encrypted with keys the organization controls.

HOW

  • Deploy Interface VPC Endpoints (AWS PrivateLink) for bedrock-runtime so API calls avoid the public internet.
  • Apply VPC Endpoint Policies and least-privilege IAM restricting access to specific Bedrock model ARNs and Knowledge Bases.
  • Use AWS KMS Customer Managed Keys (CMKs) for encryption at rest across Knowledge Bases, S3, and OpenSearch indices.
App in VPC
    ↓
Interface VPC Endpoint (PrivateLink)
    ↓
Bedrock Runtime (private backbone)
    ↓
KMS CMK encrypted stores

EXAM TRAP

Public API endpoints with AWS-managed keys do not satisfy requirements for no public internet traversal and customer-controlled keys.

Key points

  • Interface VPC Endpoints (PrivateLink)
  • bedrock-runtime private backbone routing
  • VPC Endpoint Policies
  • Least-privilege IAM to model ARNs
  • KMS CMKs for data at rest

Exam focus

Interface VPC Endpoints for Bedrock keep API traffic on the private AWS backbone — do not rely on public endpoints when isolation is required.

View progress