AWS Certified AI PractitionerAWS Services for AI/ML and Generative AIHard
A global media company uses AWS for its content delivery network and streaming services. They are exploring generative AI to automatically create short promotional video clips from longer content. Due to regulatory requirements and intellectual property concerns, all models trained and used for content generation must reside exclusively within specific geographic regions (e.g., Europe for European content) and never leave those boundaries. Which AWS mechanism ensures that the generative AI services operate within the specified geographic regions and that data residency requirements are met?
- AAWS Global Accelerator
- BAWS Organizations Service Control Policies (SCPs)
- CAmazon CloudFront Geo-restriction
- DAWS Region selection and resource deployment
Show answer & explanationAnswer & explanation
Correct answer: D. AWS Region selection and resource deployment
AWS services, including generative AI services like Amazon Bedrock or SageMaker, are deployed and operate within specific AWS Regions. To meet data residency requirements, the company must explicitly select and deploy its generative AI resources (e.g., Bedrock models, SageMaker endpoints, data storage) in the AWS Region that corresponds to the required geographic boundaries. This ensures that data processed and models used remain within that chosen region.
Why the other options are wrong
- A. AWS Global Accelerator optimizes network traffic to applications, but it doesn't control where data is physically processed or stored for data residency compliance.
- B. SCPs can restrict which services can be used or which actions can be performed in an account, but they don't inherently ensure data residency within a region for services that are already deployed to that region.
- C. CloudFront Geo-restriction controls content access based on user location, not where the generative AI models are run or where data is stored and processed for residency requirements.
AWS Region Selection for Data Residency
The practice of choosing a specific AWS Region for deploying resources to ensure data storage and processing occurs within defined geographic boundaries.
- Each AWS Region is a distinct geographical area.
- Data stored in a Region stays in that Region unless explicitly moved.
- Crucial for compliance with data residency laws (e.g., GDPR).
Memory trick: Region choice keeps data where it belongs.