Question

A healthcare company sends patient data to a SageMaker real-time inference endpoint for diagnosis predictions. A compliance auditor requires that the patient data be protected while it travels over the network between the client application and the endpoint. Which measure directly addresses this requirement?

Accepted Answer

Ensure all requests to the endpoint use HTTPS/TLS so data is encrypted in transit

Answer

Enable server-side encryption with AWS KMS on the S3 bucket that stored the training data

Answer

Attach an IAM policy that grants least-privilege access to the endpoint

Answer

Enable Amazon EBS volume encryption on the underlying inference instances