Get Your CertAIF-C01PlayCompete
‹ All AIF-C01 questions

AIF-C01 Practice Question 40: Model Invocation Logging

AWS Certified AI Practitioner (AIF-C01) · Test 4 · question 10 of 10

Security, Compliance, and Governance for AI Solutionshard

A healthcare company's compliance team must keep an audit trail of its generative AI application that records the full text of every prompt sent to Amazon Bedrock models and every response returned, along with who made each request. The records must be stored in the company's own account for later review. What should the company enable?

Select one answer
Show answer and explanation

Answer:

  • D. Amazon Bedrock model invocation logging to Amazon S3 or CloudWatch Logs

Model invocation logging collects invocation logs, model input data and model output data for invocations in your account in a Region. That includes the full request data, response data and metadata. Each log entry records the operation, the model ID, the input and output bodies, token counts, and the ARN of the principal that made the request. Logs are delivered to Amazon CloudWatch Logs, Amazon S3 or both, in the same account. It is disabled by default, so the company must turn it on (option D).

- A is wrong because CloudTrail records *API activity*, meaning which identity called which API and when. It isn't designed to capture the full prompt and response content that the auditors need. - B is wrong because AWS Config records *configuration changes* to resources. It doesn't see the content of model invocations at all. - C is wrong because Guardrails *filter or block* content, for example by masking sensitive information. They are a protection, not an audit record of every prompt and response.

Reference: Monitor model invocation using CloudWatch Logs and Amazon S3

Practice Test 4 ›

Study guides for AIF-C01

AI engineer roadmap 2026: skills, certs and the orderAI engineer roadmap for 2026: skills to learn in order, AI engineer vs ML engineer, which certifications fit each stage, and what to skip.
How AI Is Changing Software Jobs: Where to PrepareHow AI is changing software jobs: what history shows, the evidence on junior developers, what Klarna learned, new AI roles and five domains to prepare for.
How AWS Certification Exams Work: Scoring and RenewalHow AWS certification exams work: levels, booking, question types, unscored questions, scaled scores, pass marks, validity and how recertification works.
What Is Amazon Bedrock? Models, Pricing and GuardrailsWhat is Amazon Bedrock? How a request reaches a model, what happens to your data, token pricing, Guardrails, Knowledge Bases, AgentCore and the exam traps.
Google Cloud Generative AI Leader vs AWS AI PractitionerGoogle Cloud Generative AI Leader vs AWS AI Practitioner: format, cost, topics, free preparation and which certification to take first.
AWS certification cost in 2026, and free ways to prepareWhat every AWS certification costs in 2026 in USD and INR, retake and reschedule rules, the 50% voucher, and the free official ways to prepare.
AWS Generative AI Developer Professional (AIP-C01) guideWhat the AWS Certified Generative AI Developer – Professional (AIP-C01) exam covers - format, cost, the five domains, the services, and how to prepare.
Best AI certifications 2026: AWS, Google, Microsoft, ClaudeThe best AI certifications in 2026 from AWS, Google, Microsoft, Claude and Databricks, by level, with price, status and which one to take first.
Which AWS certification should you get? 2026 roadmapWhich AWS certification to get first, by role and experience, with each exam's status in October 2026, what is changing, and prices in USD and INR.
What Is RAG? How Retrieval-Augmented Generation WorksWhat RAG is and how it works: chunking, embeddings, vector search, hybrid search, reranking, GraphRAG and agentic RAG on AWS, Google and Azure.
Prompt engineering vs RAG vs fine-tuningWhen to use prompt engineering, retrieval-augmented generation, fine-tuning or continued pre-training, compared on cost, freshness, hallucination and privacy.