Chapter 5 of 5 · AWS AIF-C01
Security, Compliance and Governance
Overview of the AIF-C01 chapter on securing AI, protecting data, meeting compliance standards and setting up governance with AWS services and tools.
- 5topics
- 21 minfast track
- 2diagrams and exhibits
- 14%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Securing AI with AWS ServicesSecure AI systems on AWS with IAM roles and policies, encryption, Amazon Macie, AWS PrivateLink and a clear view of the shared…Diagram4 min
- 2Secure Data Engineering and LineageApply secure data engineering for AI: data quality, privacy enhancing techniques, access control, integrity, data lineage and…4 min
- 3AI Security Threats and ProtectionUnderstand security and privacy for AI systems: application security, threat detection, vulnerability management, prompt…4 min
- 4Compliance Standards and AWS ToolsRecognise AI compliance standards and laws such as ISO, SOC and the EU AI Act, and AWS tools that help: Artifact, Config, Audit…4 min
- 5AI Governance and Data PoliciesSet up AI governance with data lifecycle, retention, residency and logging rules, policy reviews, team training and the GenAI…Diagram5 min
About this chapter
What this chapter covers
This chapter is about keeping AI systems secure, lawful and under control. It covers the AWS services that protect AI workloads, the practices that keep data safe and traceable, the standards that apply, and the governance routines that tie it together.
It follows the fifth domain of the AIF-C01 outline, which has two topics.
The first covers methods to secure AI systems. The second covers governance and compliance regulations for AI systems.
How the topics fit together
The pages move from technical protection, to data, to threats, to rules, to governance.
- Securing with AWS services covers IAM, encryption, Macie, PrivateLink and the shared responsibility model.
- Secure data engineering covers data quality, privacy techniques, lineage and source citation.
- Threats and protection covers prompt injection, poisoning, detection and vulnerability management.
- Compliance standards and tools covers ISO, SOC, GDPR, the EU AI Act, and AWS Artifact, Config and Audit Manager.
- Governance and data policies covers data lifecycle, residency, review cadence and the Generative AI Security Scoping Matrix.
Many questions here ask you to match a service to a job. Learn each service in one line, and remember that the customer stays responsible for its own data and access.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and tables.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Keep a one page list of services and their jobs, such as Macie for sensitive data and Config for configuration checks, because look alike names are the main trap.
Ready for more practice?
The full AWS AIF-C01 question bank has 849 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by AWS. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.