This week addressed operating ML safely, controllably, affordably. Permissions (Day 1), networking (Day 2), encryption (Day 3), cost (Day 4) seem separate but combine into one operational policy. Today synthesize Days 1–4 into one decision flow for the exam.
| Axis | Core Question | Main Tools | Exam Traps |
|---|---|---|---|
| Permissions (Day 1) | Who does what | Execution role, IAM policy, PassRole | "S3 denied"=execution role, PassRole missing |
| Networking (Day 2) | Where traffic flows | VPC mode, network isolation, VPC Endpoint | Missing endpoint=job hangs |
| Encryption (Day 3) | Data and model protection | KMS (CMK), at-rest/in-transit, Secrets | kms:Decrypt missing |