AWS Certified AI PractitionerAWS Services for AI/ML and Generative AIHard
A company is mandated to ensure that all data used for training and inference of their AI/ML models remains within a specific geographical region to comply with data residency regulations. Which AWS security and compliance feature is primarily responsible for enforcing this requirement?
- AAWS Security Hub
- BAmazon CloudWatch
- CAWS Region selection
- DAWS Identity and Access Management (IAM)
Show answer & explanationAnswer & explanation
Correct answer: C. AWS Region selection
AWS Region selection is the primary mechanism for enforcing data residency. By choosing a specific AWS Region (e.g., EU-Frankfurt), customers ensure that their data, including AI/ML training data and model artifacts, is stored and processed within the geographic boundaries of that region, complying with local data residency laws.
Why the other options are wrong
- A. AWS Security Hub provides a comprehensive view of security alerts and compliance status but does not enforce data residency itself.
- B. Amazon CloudWatch is a monitoring service and does not enforce data residency.
- D. IAM manages access permissions to resources but does not control the physical location where data is stored or processed.
AWS Region Selection for Data Residency
The practice of choosing a specific AWS geographical region to ensure that data is stored and processed within defined boundaries to meet regulatory requirements.
- Each AWS Region is a separate geographic area.
- Data created in one Region generally stays in that Region unless explicitly moved.
- Crucial for compliance with data residency laws (e.g., GDPR).
Memory trick: Choose your Region wisely to keep your data where it belongs.