Get Your CertAIF-C01PlayCompete
‹ All AIF-C01 questions

AIF-C01 Practice Question 57: Guardrail Outside Bedrock Model

AWS Certified AI Practitioner (AIF-C01) · Test 6 · question 7 of 10

Applications of Foundation Modelsmedium

A company already runs an Amazon Bedrock guardrail, denied topics plus PII redaction, in front of its Bedrock-hosted assistant. It has now launched a second assistant on a self-managed open-weight model running on Amazon EC2, and compliance requires the identical rules there. Which approach applies the existing guardrail to the EC2 assistant with the least change to its architecture?

Select one answer
Show answer and explanation

Answer:

  • A. Call the ApplyGuardrail API from the application to evaluate the input and the output text, independently of any model invocation

The ApplyGuardrail API lets you *assess any text using your pre-configured Amazon Bedrock Guardrails, without invoking the foundation models*. AWS calls this being decoupled from foundation models: you send text with source set to INPUT or OUTPUT, and the same guardrail compares it against your topic avoidance rules, content filters, PII detectors and word block lists. The EC2 assistant keeps its own model and hosting and gains the existing guardrail with two API calls (option A).

- B is wrong because regular expressions can match a phone number but cannot decide whether a paragraph is *about* a denied topic; that is a semantic judgement. Hand-maintaining a parallel rule set is also how the two assistants drift out of compliance with each other. - C is wrong not because it fails, but because it is the heaviest possible answer to the question asked: it discards the team's chosen hosting to gain a control that one API call already provides. The stem asks for the least change to the architecture. - D is wrong because Macie discovers sensitive data sitting in Amazon S3 *after the fact*. It inspects stored logs, so it can neither block a denied topic nor redact PII before the user sees the response.

Reference: Use the ApplyGuardrail API in your application

Practice Test 6 ›

Study guides for AIF-C01

AI engineer roadmap 2026: skills, certs and the orderAI engineer roadmap for 2026: skills to learn in order, AI engineer vs ML engineer, which certifications fit each stage, and what to skip.
How AI Is Changing Software Jobs: Where to PrepareHow AI is changing software jobs: what history shows, the evidence on junior developers, what Klarna learned, new AI roles and five domains to prepare for.
How AWS Certification Exams Work: Scoring and RenewalHow AWS certification exams work: levels, booking, question types, unscored questions, scaled scores, pass marks, validity and how recertification works.
What Is Amazon Bedrock? Models, Pricing and GuardrailsWhat is Amazon Bedrock? How a request reaches a model, what happens to your data, token pricing, Guardrails, Knowledge Bases, AgentCore and the exam traps.
Google Cloud Generative AI Leader vs AWS AI PractitionerGoogle Cloud Generative AI Leader vs AWS AI Practitioner: format, cost, topics, free preparation and which certification to take first.
AWS certification cost in 2026, and free ways to prepareWhat every AWS certification costs in 2026 in USD and INR, retake and reschedule rules, the 50% voucher, and the free official ways to prepare.
AWS Generative AI Developer Professional (AIP-C01) guideWhat the AWS Certified Generative AI Developer – Professional (AIP-C01) exam covers - format, cost, the five domains, the services, and how to prepare.
Best AI certifications 2026: AWS, Google, Microsoft, ClaudeThe best AI certifications in 2026 from AWS, Google, Microsoft, Claude and Databricks, by level, with price, status and which one to take first.
Which AWS certification should you get? 2026 roadmapWhich AWS certification to get first, by role and experience, with each exam's status in October 2026, what is changing, and prices in USD and INR.
What Is RAG? How Retrieval-Augmented Generation WorksWhat RAG is and how it works: chunking, embeddings, vector search, hybrid search, reranking, GraphRAG and agentic RAG on AWS, Google and Azure.
Prompt engineering vs RAG vs fine-tuningWhen to use prompt engineering, retrieval-augmented generation, fine-tuning or continued pre-training, compared on cost, freshness, hallucination and privacy.