Chapter 4 · ML Solution Monitoring, Maintenance, and Security·v2.1.0·Updated 6/14/2026·~8 min
What's changed: In-scope coverage: monitoring/ops/cost/security services
4.2ML Security and Cost
Key points
Understand security/cost of ML operations: least privilege with IAM, encryption (KMS/TLS) and VPC isolation, and cost optimization (right-sizing, managed spot training).
Like any AWS workload, ML solutions are protected with least privilege, encryption, and isolation, and their training/inference cost is optimized.
4.2.1Security and cost
- IAM least privilege: give training jobs/endpoints roles with minimal permissions (no embedded keys).
- Encryption & isolation: encrypt data with KMS (at rest)/TLS (in transit); isolate networking with a VPC for private communication.
- Cost optimization: right-size instances, use managed spot training, and save on inference with serverless/multi-model.
Exam point
Common on MLA: cut training cost = managed spot training (with checkpoints for interruptions), data protection = KMS/TLS + VPC isolation, least-privilege IAM roles for jobs/endpoints.
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.