Question
A financial institution is using Amazon Bedrock to develop an AI application. The application is hosted in a VPC. To meet regulatory compliance standards, the VPC is not allowed access to any internet traffic.
Which AWS service or feature will meet these requirements?
- A. AWS PrivateLink Correct
- B. Amazon Macie
- C. Amazon CloudFront
- D. Internet gateway
Explanation
AWS PrivateLink lets the VPC reach Amazon Bedrock through an interface VPC endpoint, so traffic between the application and Bedrock stays on the AWS network and never crosses the public internet, with no internet gateway or NAT device needed. Amazon Macie discovers sensitive data in S3, CloudFront is a content delivery network, and an internet gateway would add the internet access the regulation forbids.
