A Company Provisions Amazon SageMaker Notebook Instances for Its Data

question 136

Multiple Choice

A company provisions Amazon SageMaker notebook instances for its data science team and creates Amazon VPC interface endpoints to ensure communication between the VPC and the notebook instances. All connections to the Amazon SageMaker API are contained entirely and securely using the AWS network. However, the data science team realizes that individuals outside the VPC can still connect to the notebook instances across the internet. Which set of actions should the data science team take to fix the issue?

• A) Modify the notebook instances' security group to allow traffic only from the CIDR ranges of the VPC. Apply this security group to all of the notebook instances' VPC interfaces.
• B) Create an IAM policy that allows the sagemaker:CreatePresignedNotebooklnstanceUrl and sagemaker:DescribeNotebooklnstance actions from only the VPC endpoints. Apply this policy to all IAM users, groups, and roles used to access the notebook instances. Create an IAM policy that allows the sagemaker:CreatePresignedNotebooklnstanceUrl and sagemaker:DescribeNotebooklnstance actions from only the VPC endpoints. Apply this policy to all IAM users, groups, and roles used to access the notebook instances.
• C) Add a NAT gateway to the VPC. Convert all of the subnets where the Amazon SageMaker notebook instances are hosted to private subnets. Stop and start all of the notebook instances to reassign only private IP addresses.
• D) Change the network ACL of the subnet the notebook is hosted in to restrict access to anyone outside the VPC.

---

Definitions:

Multiple Apps

The capability or instance of using or running more than one application simultaneously on a device.

Windows 10

An operating system developed by Microsoft, providing a platform for personal computer applications and services.

Customized

Modified or tailored to meet specific requirements or preferences of a user or customer.

Press And Hold

An interaction technique involving pressing and holding down a button or screen area for a specified duration to invoke a secondary action.