AWS Certified AI PractitionerAWS Services for AI/ML and Generative AIMedium
A global pharmaceutical company is developing a new drug discovery platform that involves training machine learning models with highly sensitive patient genetic data. This data must remain within specific geographical boundaries due to strict regulatory compliance requirements. Which AWS security measure is critical to ensure that the data processed by AWS AI/ML services adheres to these data residency requirements?
- AUsing AWS WAF to filter malicious traffic to the ML endpoints.
- BEncrypting data at rest and in transit using AWS Key Management Service (KMS) with customer-managed keys (CMKs).
- CImplementing VPC Interface Endpoints (PrivateLink) for private connectivity to AWS services.
- DSelecting the appropriate AWS Region where the data processing and storage will occur.
Show answer & explanationAnswer & explanation
Correct answer: D. Selecting the appropriate AWS Region where the data processing and storage will occur.
Data residency is fundamentally about where data is physically stored and processed. Selecting the correct AWS Region ensures that data remains within the required geographical boundaries, satisfying regulatory compliance for sensitive data like patient genetic information.
Why the other options are wrong
- A. AWS WAF protects against web exploits but does not address data residency.
- B. Encryption with CMKs secures data but doesn't inherently enforce data residency; the data still resides in the chosen region.
- C. VPC Interface Endpoints provide private connectivity but do not dictate the physical location of the data.
AWS Region Selection for Data Residency
The practice of choosing an AWS Region based on regulatory or compliance requirements that dictate where data must be physically stored and processed.
- Critical for sensitive data (e.g., patient, financial).
- Ensures data remains within specific geographical boundaries.
- A foundational aspect of compliance for global operations.
Memory trick: Regions are the root of residency, ensuring data stays put.