
Explanation:
Why Option C is correct:
Data residency and processing within the same continent: The solution specifies "Pre-process the data points within the Region based on geographic origin before sending the data points to Amazon Bedrock." This ensures data processing occurs within the same geographic region/continent as required.
Audit trails of decision-making processes: "Use AWS CloudTrail immutable logs to audit the decision-making processes" provides immutable audit trails, which is a key requirement for compliance and governance.
Data classification capabilities: "Use Amazon Macie to classify the data" directly addresses the requirement for data classification capabilities.
Compliance with local regulations: "Use Amazon S3 Object Lock with Region-specific S3 bucket policies" helps ensure data protection and storage compliance at the regional level.
Why Option A is incorrect:
Why Option B is incorrect:
Key AWS Services Used in Option C:
This solution comprehensively addresses all requirements: data residency, audit trails, data classification, and compliance with local regulations.
Ultimate access to all questions.
No comments yet.
A company is developing a generative AI (GenAI) application by using Amazon Bedrock. The application will analyze patterns and relationships in the company's data. The application will process millions of new data points daily across AWS Regions in Europe, North America, and Asia before storing the data in Amazon S3.
The application must comply with local data protection and storage regulations. Data residency and processing must occur within the same continent. The application must also maintain audit trails of the application's decision-making processes and provide data classification capabilities.
Which solution will meet these requirements?
A
Deploy the application in each Region with local IAM policies. Use Amazon Bedrock cross-Region inference to distribute the workload. Use Amazon CloudWatch to log AI decision-making processes. Manually track compliance certifications across Regions.
B
Use SCPs with AWS Organizations to manage location-specific permissions. Use AWS CloudTrail immutable logs to audit decision-making processes. Import a custom model into Amazon Bedrock and deploy the model to each Region.
C
Use Amazon S3 Object Lock with Region-specific S3 bucket policies. Pre-process the data points within the Region based on geographic origin before sending the data points to Amazon Bedrock. Use Amazon Macie to classify the data. Use AWS CloudTrail immutable logs to audit the decision-making processes.