← AWS Certified AI Practitioner (AIF-C01)
Test yourself →

Fundamentals of AI, ML & deep learning

What AI, ML and deep learning actually are

Artificial Intelligence (AI) is the broad field of building systems that can perform tasks normally needing human intelligence - reasoning, perception, language, decision-making.

Machine Learning (ML) sits inside AI: it is the practice of training algorithms on data so they learn patterns and improve at a task without being explicitly programmed with rules for every case.

Deep learning sits inside ML: it uses artificial neural networks with many layers (hence 'deep') to learn complex patterns, especially from unstructured data like images, audio and text.

Generative AI sits inside deep learning: models (often built on transformer architecture) that generate new content - text, images, code, audio - rather than just classifying or predicting a number.

The three main ML learning types

  • Supervised learning: trains on labelled data (input plus known correct output), e.g. predicting house price from features. Used for classification and regression.
  • Unsupervised learning: trains on unlabelled data to find structure, e.g. clustering customers into segments. No 'correct answer' given.
  • Reinforcement learning: an agent learns by taking actions in an environment and receiving rewards or penalties, aiming to maximise cumulative reward over time, e.g. game-playing agents or robotics.

Key building blocks of neural networks

  • Neurons (nodes) organised in layers: input layer, one or more hidden layers, output layer.
  • Weights and biases: learned numeric values that determine how strongly inputs influence outputs.
  • Activation functions (e.g. ReLU, sigmoid): introduce non-linearity so networks can learn complex patterns, not just straight lines.
  • Training uses forward propagation (making a prediction) and backpropagation (adjusting weights based on the error, using gradient descent) across many epochs.

Common exam trip-ups

  • Do not confuse AI (broadest), ML (subset), deep learning (subset of ML) and generative AI (subset of deep learning) - the exam loves testing this nesting.
  • Labelled data is the defining feature of supervised learning, not unsupervised.
  • Reinforcement learning is defined by reward signals and sequential decisions, not by having labelled training examples.
  • A model 'training' on data is different from a model 'performing inference' (making predictions on new, unseen data) - know the split between the training phase and the inference phase.
  • Overfitting means a model performs well on training data but poorly on new data - it has memorised rather than generalised.
  • AI is the broadest field; ML is a subset of AI; deep learning is a subset of ML; generative AI is a subset of deep learning - remember this exact nesting order.
  • Supervised learning uses labelled data (known input-output pairs) for tasks like classification and regression.
  • Unsupervised learning uses unlabelled data to find hidden structure, e.g. clustering.
  • Reinforcement learning trains an agent via rewards and penalties from actions taken in an environment to maximise cumulative reward.
  • Deep learning models are built from neural networks with multiple hidden layers between input and output.
  • Backpropagation adjusts a neural network's weights based on prediction error, using gradient descent, across training epochs.
  • Activation functions (e.g. ReLU, sigmoid) add non-linearity so a network can model complex relationships.
  • Training is when a model learns from data; inference is when a trained model makes predictions on new, unseen data.
  • Overfitting = strong performance on training data but poor performance on new/unseen data (model has memorised, not generalised).
  • Generative AI, often built on transformer architecture, creates new content (text, image, audio, code) rather than only classifying or predicting.
  • Regression predicts a continuous numeric value; classification predicts a discrete category or label.
How does AI relate to ML, deep learning and generative AI?
Nested subsets: AI is broadest, ML is a subset of AI, deep learning is a subset of ML, generative AI is a subset of deep learning.
tap to reveal
What defines supervised learning?
Training on labelled data (inputs with known correct outputs) for tasks like classification and regression.
tap to reveal
What defines unsupervised learning?
Training on unlabelled data to discover hidden patterns or structure, e.g. clustering.
tap to reveal
What defines reinforcement learning?
An agent learns by taking actions in an environment and receiving rewards or penalties, aiming to maximise cumulative reward.
tap to reveal
What makes deep learning 'deep'?
Neural networks with multiple hidden layers between the input and output layers.
tap to reveal
What is backpropagation?
The process of adjusting a neural network's weights based on prediction error, using gradient descent, to reduce error over training.
tap to reveal
What role do activation functions play?
They introduce non-linearity so the network can learn complex, non-straight-line patterns.
tap to reveal
What is the difference between training and inference?
Training is when the model learns from data; inference is when the trained model makes predictions on new, unseen data.
tap to reveal
What is overfitting?
When a model performs well on training data but poorly on new data because it has memorised rather than generalised.
tap to reveal
What is generative AI typically built on?
Transformer architecture, used to generate new content such as text, images, audio or code.
tap to reveal
What is the difference between classification and regression?
Classification predicts a discrete category/label; regression predicts a continuous numeric value.
tap to reveal
Give an example task suited to unsupervised learning.
Customer segmentation - clustering customers into groups without predefined labels.
tap to reveal
Give an example task suited to reinforcement learning.
A game-playing agent or robot learning optimal actions through trial and reward feedback.
tap to reveal

Generative AI concepts & use cases

What generative AI actually is

Generative AI is a subset of deep learning that creates new content - text, images, audio, video, or code - rather than just predicting a label or a number.

It learns patterns from huge training datasets and uses that learned distribution to produce novel, often unique, outputs each time you ask.

Most modern generative AI for text and code runs on transformer-based large language models (LLMs), which use a self-attention mechanism to weigh the relevance of each word against every other word in the input.

Foundation models (FMs)

A foundation model is a very large model pre-trained on broad, unlabelled data that can be adapted to many downstream tasks without retraining from scratch.

Key traits examiners test: FMs are multi-purpose (not built for one narrow job), they need adaptation (prompting, fine-tuning, or RAG) to shine at a specific task, and they get better with more data and compute (scale).

Amazon Bedrock is AWS's managed service for accessing FMs from multiple providers (Anthropic, Meta, Mistral, Cohere, Stability AI, Amazon Titan/Nova) through one API - no infrastructure to manage.

Core generative AI concepts

  • Tokens: the chunks (words or word-pieces) a model reads and generates; pricing and context limits are measured in tokens, not words.
  • Embeddings: numerical vector representations of meaning, used for search, clustering, and RAG retrieval.
  • Prompt: the input instruction; prompt engineering is refining wording to get better outputs without changing the model.
  • Context window: the maximum amount of text (in tokens) a model can consider at once - too long and older content gets truncated or ignored.
  • Hallucination: when a model generates plausible-sounding but false or unsupported content - a known limitation, not a bug you can fully eliminate.
  • Temperature: a setting controlling randomness/creativity of output - low temperature = more deterministic, high = more varied.

Common exam trap

Generative AI is NOT the same as traditional/discriminative ML. Discriminative models classify or predict from existing data (is this email spam?); generative models create brand-new content that did not exist before. Know which use case fits which.

Business use cases (exam favourites)

  • Content creation: marketing copy, images, video scripts, summarisation.
  • Chatbots and virtual assistants (e.g. Amazon Q).
  • Code generation and review (e.g. Amazon Q Developer).
  • Search and personalisation, using embeddings/RAG.
  • Summarising long documents and translating text.

Limitations to remember

High compute cost, interpretability challenges (it's hard to explain exactly why an output was produced), potential for bias inherited from training data, and hallucination risk - always mentioned as trade-offs against generative AI's flexibility.

  • Generative AI creates new content (text, image, audio, video, code); discriminative/traditional ML classifies or predicts from existing data.
  • A foundation model (FM) is pre-trained on broad unlabelled data and adapted to many downstream tasks, not built for one job.
  • Amazon Bedrock gives serverless API access to multiple providers' foundation models (Anthropic, Meta, Mistral, Cohere, Stability AI, Amazon Titan/Nova) with no infrastructure to manage.
  • Most text/code generative AI uses transformer architecture with a self-attention mechanism to weigh relationships between all words in the input.
  • Tokens are the units (words/word-pieces) models process; pricing and context limits are measured in tokens.
  • The context window is the maximum tokens a model can consider at once in a single interaction.
  • Embeddings are vector representations of meaning used for semantic search, clustering, and RAG retrieval.
  • Hallucination is when a model generates plausible but false or unsupported content - a known, inherent limitation, not something fully preventable by prompting alone.
  • Temperature controls output randomness: low = more deterministic/focused, high = more creative/varied.
  • Amazon Q is AWS's generative AI-powered assistant, with Amazon Q Developer aimed specifically at code generation and review.
  • Generative AI models improve with more training data and compute - this is called scaling.
  • Key business use cases: content creation, chatbots/virtual assistants, code generation, summarisation, translation, and personalised search via embeddings.
What is generative AI?
A subset of deep learning that creates new content (text, image, audio, video, code) by learning patterns from training data.
tap to reveal
How does generative AI differ from discriminative/traditional ML?
Generative AI creates new content; discriminative ML classifies or predicts labels/values from existing data.
tap to reveal
What is a foundation model (FM)?
A large model pre-trained on broad, unlabelled data that can be adapted to many downstream tasks without training from scratch.
tap to reveal
What is Amazon Bedrock?
A fully managed AWS service giving API access to foundation models from multiple providers (Anthropic, Meta, Mistral, Cohere, Stability AI, Amazon Titan/Nova) with no infrastructure to manage.
tap to reveal
What architecture underpins most modern generative AI for text?
The transformer architecture, using a self-attention mechanism to weigh relevance between all words in the input.
tap to reveal
What is a token in generative AI?
A chunk of text (word or word-piece) that a model reads or generates; the unit used for pricing and context limits.
tap to reveal
What is the context window?
The maximum number of tokens a model can consider at once in a single input/output interaction.
tap to reveal
What are embeddings used for?
Numerical vector representations of meaning, used for semantic search, clustering, and retrieval (e.g. in RAG).
tap to reveal
What is hallucination in generative AI?
When a model produces plausible-sounding but false or unsupported content - an inherent limitation of generative models.
tap to reveal
What does the temperature setting control?
The randomness of generated output - low temperature gives deterministic/focused results, high temperature gives more varied/creative results.
tap to reveal
What is prompt engineering?
The practice of refining the wording and structure of a prompt to get better model outputs without changing or retraining the model.
tap to reveal
What is Amazon Q Developer used for?
AWS's generative AI assistant focused on code generation, code review, and developer productivity.
tap to reveal
Name three business use cases for generative AI.
Content creation, chatbots/virtual assistants, and code generation (also valid: summarisation, translation, personalised search).
tap to reveal
What limitation does scaling (more data/compute) address in FMs?
Generally improves FM performance and capability, but increases compute cost and does not remove hallucination risk.
tap to reveal
Why is interpretability listed as a generative AI limitation?
Because it's difficult to explain exactly why a model produced a specific output, making outputs hard to fully audit or trust blindly.
tap to reveal

Foundation models & prompt engineering

What is a foundation model?

A foundation model (FM) is a large, pre-trained model trained on huge, broad datasets that can be adapted to many downstream tasks (text, image, code, audio) rather than one narrow job.

Amazon Bedrock is the AWS managed service that gives serverless, API access to FMs from multiple providers (Amazon, Anthropic, Meta, Mistral, Cohere, Stability AI, AI21) without you managing infrastructure.

Key foundation model concepts

  • Pre-training: the model learns general patterns from massive unlabelled data; this is expensive and done once by the provider.
  • Fine-tuning: you adapt a pre-trained FM to your own labelled data for a specific task; cheaper and faster than training from scratch.
  • Continued pre-training (domain adaptation): further training on unlabelled domain data to improve vocabulary/context understanding.
  • Retrieval Augmented Generation (RAG): the model retrieves relevant external data at inference time to ground its answer, reducing hallucination without retraining.
  • Amazon Bedrock Knowledge Bases is AWS's managed RAG feature, using vector embeddings and a vector store.

Inference parameters (exam favourites)

  • Temperature (0 to 1): controls randomness/creativity. Low = deterministic, focused, repeatable. High = diverse, creative, riskier.
  • Top P: controls diversity by only sampling from the smallest set of tokens whose cumulative probability meets P. Lower Top P = narrower, more predictable choices.
  • Top K: limits sampling to the K most likely next tokens.
  • Max tokens / response length: caps the length of the generated output and therefore cost.
  • These parameters affect output quality and cost but do NOT change the model's underlying knowledge.

Prompt engineering essentials

Prompt engineering is crafting inputs to get better, more reliable outputs WITHOUT changing model weights - it's the cheapest and fastest way to improve results.

  • Zero-shot prompting: no examples given, just the instruction.
  • Few-shot prompting: a small number of examples included in the prompt to show the desired pattern.
  • Chain-of-thought (CoT) prompting: asking the model to reason step by step, improving performance on multi-step or logic problems.
  • Prompt templates: reusable structured prompts with placeholders, useful for consistency at scale.
  • Negative prompting: telling the model what NOT to do or include, common in image generation.

Prompt risks and mitigation

  • Prompt injection: malicious input trying to override the system prompt or instructions - a security concern for AI Practitioner exam.
  • Jailbreaking: attempts to bypass safety guardrails.
  • Hallucination: the model confidently generates false or unsupported information - mitigate with RAG, fine-tuning, or lower temperature.
  • Amazon Bedrock Guardrails helps filter harmful content, block denied topics, and reduce hallucinations at the platform level.

Common mistakes

  • Confusing fine-tuning (changes model weights) with prompt engineering (changes only the input, no retraining).
  • Thinking temperature and Top P do the same thing - they are separate, complementary controls.
  • Forgetting RAG does NOT retrain the model; it augments the prompt with retrieved context at runtime.
  • Assuming more examples always help - few-shot only needs enough examples to demonstrate the pattern, not a full dataset.
  • A foundation model is pre-trained on broad, large-scale data and adapted to many downstream tasks, not just one.
  • Amazon Bedrock provides serverless API access to FMs from providers including Anthropic, Meta, Mistral, Cohere, AI21, Stability AI, and Amazon.
  • Temperature (0-1) controls randomness: low values give focused, deterministic output; high values give creative, varied output.
  • Top P restricts sampling to the smallest token set whose cumulative probability reaches P; lower Top P narrows choices.
  • Top K limits the model to choosing from only the K most probable next tokens.
  • Zero-shot prompting gives no examples; few-shot prompting includes a handful of examples to guide the model's pattern.
  • Chain-of-thought prompting asks the model to reason step by step, improving accuracy on multi-step problems.
  • RAG (Retrieval Augmented Generation) retrieves external data at inference time to ground answers and reduce hallucination, without retraining the model.
  • Amazon Bedrock Knowledge Bases is AWS's managed RAG capability using vector embeddings and a vector store.
  • Fine-tuning changes the model's weights using your labelled data; prompt engineering only changes the input text, no retraining occurs.
  • Prompt injection is a security risk where malicious input tries to override system instructions or guardrails.
  • Amazon Bedrock Guardrails can filter harmful content, block denied topics, and help reduce hallucinations at the platform level.
What is a foundation model?
A large model pre-trained on broad data that can be adapted to many downstream tasks, not just one narrow job.
tap to reveal
What does Amazon Bedrock provide?
Serverless API access to foundation models from multiple providers (Anthropic, Meta, Mistral, Cohere, AI21, Stability AI, Amazon) without managing infrastructure.
tap to reveal
What does the temperature parameter control?
Randomness of output: low temperature = focused/deterministic, high temperature = creative/varied.
tap to reveal
What does Top P do?
Limits sampling to the smallest set of tokens whose cumulative probability reaches P, controlling diversity of output.
tap to reveal
What does Top K do?
Restricts the model to choosing its next token only from the K most likely candidates.
tap to reveal
Define zero-shot prompting.
Giving the model an instruction with no examples of the desired output.
tap to reveal
Define few-shot prompting.
Including a small number of examples in the prompt to demonstrate the desired pattern before the real task.
tap to reveal
What is chain-of-thought prompting?
Prompting the model to reason step by step, which improves accuracy on multi-step or logical tasks.
tap to reveal
What is RAG and what problem does it solve?
Retrieval Augmented Generation - retrieves relevant external data at inference time to ground answers and reduce hallucination, without retraining the model.
tap to reveal
What is Amazon Bedrock Knowledge Bases?
AWS's managed RAG feature that uses vector embeddings and a vector store to ground model responses in your data.
tap to reveal
How does fine-tuning differ from prompt engineering?
Fine-tuning updates the model's weights using labelled data; prompt engineering only changes the input text and does not retrain the model.
tap to reveal
What is prompt injection?
A security risk where malicious input attempts to override a model's system prompt or safety instructions.
tap to reveal
What is hallucination in the context of FMs?
When a model confidently generates false or unsupported information; mitigated by RAG, fine-tuning, or lower temperature.
tap to reveal
What does Amazon Bedrock Guardrails do?
Filters harmful content, blocks denied topics, and helps reduce hallucinations at the platform level.
tap to reveal
What is negative prompting typically used for?
Telling the model what to exclude or avoid, commonly used to steer image generation away from unwanted elements.
tap to reveal

Amazon Bedrock, SageMaker & AI services

Amazon Bedrock

Bedrock is AWS's fully managed service for building generative AI apps using foundation models (FMs) from multiple providers — Amazon (Titan, Nova), Anthropic (Claude), Meta (Llama), Mistral, Cohere, AI21, and Stability AI — all through one API.

  • It is serverless: no infrastructure to provision or manage.
  • Bedrock lets you customise FMs via fine-tuning and continued pre-training on your own labelled data, stored privately.
  • Knowledge Bases add Retrieval Augmented Generation (RAG) by connecting FMs to your own data sources (S3, etc.) without retraining.
  • Agents for Bedrock let a model orchestrate multi-step tasks and call external APIs/Lambda functions.
  • Guardrails let you filter harmful content, block topics, redact PII, and reduce hallucinations — configurable independent of the model.
  • Your data is never used to train the underlying FMs, and stays encrypted in your VPC boundary — a common exam point on data privacy.

Amazon SageMaker

SageMaker is the end-to-end platform for building, training, and deploying your OWN custom machine learning models (not just using pre-trained FMs).

  • SageMaker Studio is the unified IDE for the whole ML lifecycle.
  • SageMaker Canvas gives a no-code visual interface for building ML models — key for the 'no coding required' exam clue.
  • SageMaker JumpStart provides pre-built, pre-trained models and solution templates you can deploy quickly.
  • SageMaker Data Wrangler simplifies data prep and feature engineering.
  • SageMaker Clarify detects bias in data/models and adds explainability (SHAP values).
  • SageMaker Model Monitor watches deployed models for data drift and quality degradation in production.
  • Ground Truth is for building high-quality labelled training datasets, including human-in-the-loop labelling.

Common mistake

Students mix up Bedrock (use/customise existing FMs) with SageMaker (build custom models from scratch). If the scenario says 'quickly build a generative AI app with minimal ML expertise', think Bedrock. If it says 'train a custom model on our own algorithm/data with full control', think SageMaker.

Pre-built AI services

AWS also offers task-specific AI services needing zero ML knowledge:

  • Amazon Rekognition — image and video analysis (object/face detection).
  • Amazon Textract — extracts text and data from scanned documents.
  • Amazon Comprehend — natural language processing, sentiment analysis, entity extraction.
  • Amazon Transcribe — speech to text.
  • Amazon Polly — text to speech.
  • Amazon Translate — language translation.
  • Amazon Lex — builds conversational chatbots (same tech as Alexa).
  • Amazon Kendra — intelligent enterprise search using natural language.
  • Amazon Personalize — real-time personalised recommendations.

Know which service maps to which use case — the exam loves matching questions.

  • Bedrock is serverless and gives API access to multiple foundation models from providers like Anthropic, Meta, Amazon, Mistral, Cohere, and AI21 through one interface.
  • Bedrock never uses your input/output data to train the underlying foundation models — your data stays private.
  • SageMaker is for building, training, and deploying custom ML models end to end, unlike Bedrock which uses pre-trained FMs.
  • SageMaker Canvas is the no-code visual tool for building ML models — the key exam clue is 'no coding required'.
  • Bedrock Knowledge Bases implement RAG (Retrieval Augmented Generation) by connecting FMs to your own data sources without retraining the model.
  • Bedrock Agents can orchestrate multi-step tasks and invoke external APIs or Lambda functions on a user's behalf.
  • Bedrock Guardrails filter harmful content, block denied topics, and redact PII independently of the chosen model.
  • SageMaker Clarify detects bias in training data and models, and provides explainability via SHAP values.
  • SageMaker Model Monitor tracks deployed models in production for data drift and quality degradation.
  • Amazon Textract extracts text and structured data from scanned documents; Amazon Comprehend does NLP and sentiment analysis on text.
  • Amazon Rekognition analyses images and video; Amazon Transcribe converts speech to text; Amazon Polly converts text to speech.
  • Amazon Kendra is intelligent enterprise search; Amazon Personalize delivers real-time personalised recommendations; Amazon Lex builds conversational chatbots.
What is Amazon Bedrock in one sentence?
A fully managed, serverless service giving API access to multiple foundation models from providers like Anthropic and Meta to build generative AI apps.
tap to reveal
How does Bedrock differ from SageMaker?
Bedrock lets you use and customise existing foundation models; SageMaker lets you build, train, and deploy your own custom ML models from scratch.
tap to reveal
Does Bedrock use customer data to train its foundation models?
No — customer input and output data is never used to train the underlying FMs and remains private.
tap to reveal
What does Bedrock Knowledge Bases enable?
Retrieval Augmented Generation (RAG) — connecting a foundation model to your own external data sources for grounded answers, without retraining.
tap to reveal
What are Agents for Bedrock used for?
Orchestrating multi-step tasks and calling external APIs or AWS Lambda functions on the user's behalf.
tap to reveal
What does Bedrock Guardrails do?
Filters harmful content, blocks denied topics, and redacts PII, configurable independently of the underlying model.
tap to reveal
Which SageMaker tool is the no-code option for building ML models?
SageMaker Canvas.
tap to reveal
Which SageMaker tool detects bias and provides model explainability?
SageMaker Clarify, using SHAP values for explainability.
tap to reveal
Which SageMaker tool monitors deployed models for data drift?
SageMaker Model Monitor.
tap to reveal
Which SageMaker feature provides pre-built, pre-trained models and solution templates?
SageMaker JumpStart.
tap to reveal
Which AWS AI service extracts text and data from scanned documents?
Amazon Textract.
tap to reveal
Which AWS AI service performs sentiment analysis and entity extraction on text?
Amazon Comprehend.
tap to reveal
Which AWS AI service builds conversational chatbots?
Amazon Lex.
tap to reveal
Which AWS AI service gives real-time personalised recommendations?
Amazon Personalize.
tap to reveal
Which AWS AI service is used for intelligent enterprise search using natural language?
Amazon Kendra.
tap to reveal

Responsible AI, bias, fairness & safety

Why responsible AI matters for the exam

AWS AI Practitioner tests whether you understand the risks generative AI and ML introduce, and which AWS tools/features address each risk. Think in categories: bias, fairness, explainability, safety/toxicity, transparency, privacy, and governance.

Core concepts

  • Bias: systematic skew in a model's outputs, usually because training data under-represents or misrepresents a group. Can enter at data collection, labelling, or model design stages.
  • Fairness: outputs should not disadvantage protected groups (age, gender, ethnicity, disability, etc). There is no single fairness metric - AWS SageMaker Clarify offers several (e.g. class imbalance, difference in positive proportions).
  • Explainability: the ability to say why a model produced a result. SHAP values (used inside Clarify) are the standard technique tested.
  • Transparency: giving users and stakeholders visibility into how a system works, its limitations, and intended use - AWS publishes 'service cards' and model cards for this.
  • Toxicity and safety: filtering harmful, hateful, or unsafe content from generative outputs.
  • Hallucination: a generative model producing confident but false or fabricated information - a generative-AI-specific risk, not really a 'bias' issue.

Key AWS tools (exam favourites)

  • Amazon SageMaker Clarify: detects bias in training data and model predictions (pre-training and post-training bias metrics) and provides explainability via SHAP.
  • Amazon SageMaker Model Monitor: watches deployed models for data drift, quality drift, and bias drift over time.
  • Amazon Augmented AI (A2I): inserts human review into ML predictions, useful for low-confidence or high-stakes decisions.
  • Guardrails for Amazon Bedrock: configurable filters for denied topics, harmful content, PII redaction, word filters, and grounding/relevance checks to reduce hallucination.
  • AWS AI Service Cards: AWS's own transparency documents describing intended use, limitations, and performance of AWS AI services.

AWS's Responsible AI pillars

AWS names eight core dimensions: fairness, explainability, privacy and security, safety, controllability, veracity and robustness, governance, and transparency. You do not need to recite all eight verbatim, but recognise them when listed as answer options.

Common mistakes

  • Confusing bias (a data/model property) with fairness (an outcome/impact property) - bias causes unfairness, but they are not the same word for the exam's purposes.
  • Thinking more training data automatically fixes bias - it only helps if the new data addresses the specific under-representation.
  • Forgetting that human-in-the-loop (A2I) is a control, not an automatic fix - it needs correct escalation thresholds.
  • Assuming Bedrock Guardrails stops all hallucination - it reduces risk (via grounding checks) but cannot guarantee zero hallucinations.
  • Mixing up SageMaker Clarify (bias/explainability) with SageMaker Model Monitor (ongoing drift detection) - Clarify is more about the 'why', Monitor is about 'is it changing over time'.
  • Bias is a data/model skew problem; fairness is about equitable outcomes for protected groups - they are related but distinct exam concepts.
  • Amazon SageMaker Clarify detects pre-training and post-training bias and provides explainability using SHAP values.
  • Amazon SageMaker Model Monitor tracks deployed models for data drift, model quality drift, and bias drift over time.
  • Amazon Augmented AI (A2I) inserts human review into ML predictions, especially for low-confidence or high-stakes outputs.
  • Guardrails for Amazon Bedrock can filter denied topics, block harmful content, redact PII, apply word filters, and run grounding checks to reduce hallucination.
  • Hallucination means a generative model produces confident but false or fabricated content - a generative-AI-specific safety risk.
  • AWS names eight Responsible AI pillars: fairness, explainability, privacy and security, safety, controllability, veracity and robustness, governance, and transparency.
  • AWS AI Service Cards are AWS's transparency documents describing an AI service's intended use, limitations, and performance characteristics.
  • SHAP (SHapley Additive exPlanations) is the explainability technique used inside SageMaker Clarify to attribute feature importance.
  • Bedrock Guardrails reduce hallucination risk via grounding/relevance checks but cannot guarantee zero hallucinations.
  • Transparency is about giving users visibility into how a system works and its limits; explainability is about justifying a specific output.
  • Bias can enter a model at data collection, labelling, or model design stages - not only from the training dataset itself.
What is the difference between bias and fairness in AWS's Responsible AI framing?
Bias is a systematic skew in data or model outputs; fairness is about whether outcomes are equitable across protected groups. Bias causes unfairness, but they are distinct concepts.
tap to reveal
Which AWS service detects bias in training data and model predictions?
Amazon SageMaker Clarify - it reports pre-training and post-training bias metrics.
tap to reveal
Which technique does SageMaker Clarify use for explainability?
SHAP (SHapley Additive exPlanations) values, which attribute a prediction to individual input features.
tap to reveal
What does Amazon SageMaker Model Monitor do?
Watches deployed models over time for data drift, model quality drift, and bias drift.
tap to reveal
What is Amazon Augmented AI (A2I) used for?
Inserting human review into ML predictions, particularly for low-confidence or high-stakes decisions.
tap to reveal
What are Guardrails for Amazon Bedrock?
Configurable safety controls for Bedrock models that filter denied topics, block harmful content, redact PII, apply word filters, and run grounding checks.
tap to reveal
What is hallucination in generative AI?
When a model produces confident but false or fabricated information, a risk specific to generative AI.
tap to reveal
Name the eight pillars of AWS's Responsible AI framework.
Fairness, explainability, privacy and security, safety, controllability, veracity and robustness, governance, and transparency.
tap to reveal
What is an AWS AI Service Card?
A transparency document from AWS describing an AI service's intended use, limitations, and performance characteristics.
tap to reveal
Can Bedrock Guardrails guarantee zero hallucinations?
No - grounding and relevance checks reduce hallucination risk but cannot guarantee it never happens.
tap to reveal
At what stages can bias enter an ML system?
Data collection, data labelling, and model design - not only from the raw training dataset.
tap to reveal
What is the exam-relevant difference between transparency and explainability?
Transparency gives overall visibility into how a system works and its limitations; explainability justifies why a specific output was produced.
tap to reveal
Which SageMaker tool would you use to escalate uncertain model predictions to a human reviewer?
Amazon Augmented AI (A2I).
tap to reveal
Does adding more training data always fix bias?
No - it only helps if the new data specifically addresses the under-representation causing the bias.
tap to reveal

Security, governance & compliance for AI

Why this topic matters

AI Practitioner leans heavily on responsible AI, security and governance - expect several questions on shared responsibility, data protection, and AWS's governance tooling.

Shared Responsibility Model for AI

  • AWS secures the infrastructure ('security OF the cloud') - hardware, host OS, physical facilities, the managed service itself.
  • You secure 'IN the cloud' - your data, IAM permissions, model fine-tuning data, prompts, encryption choices, and how you configure guardrails.
  • For Bedrock and SageMaker, AWS never uses your prompts or outputs to train its base models, and your data is not shared across customers - this is a favourite exam point.

Data protection basics

  • Encryption at rest uses AWS KMS by default across Bedrock, SageMaker, and S3-backed datasets; you can bring your own customer-managed key (CMK).
  • Encryption in transit uses TLS.
  • VPC endpoints (via AWS PrivateLink) let you call Bedrock/SageMaker without traffic crossing the public internet.
  • Amazon Macie discovers and classifies sensitive data (like PII) stored in S3 - useful for auditing training data before it touches a model.

Governance and compliance tooling

  • AWS Artifact - self-service portal for AWS's own compliance reports (SOC, ISO, PCI) and to accept agreements.
  • AWS Audit Manager - continuously collects evidence to assess risk and compliance against frameworks (e.g. GDPR, HIPAA).
  • AWS Config - tracks resource configuration changes and checks them against rules (compliance drift).
  • AWS CloudTrail - logs every API call for auditing 'who did what, when' - critical for AI governance trails.
  • Amazon SageMaker Model Cards and Model Monitor document model intent, risk, performance and detect drift in production - core to AI governance.
  • SageMaker Clarify detects bias in data/models and explains predictions (explainability), supporting fairness requirements.

Guardrails for Amazon Bedrock

  • A managed feature to filter harmful content, block denied topics, redact PII, and reduce hallucinations by grounding checks - configurable per use case, reusable across models.

Common mistakes

  • Confusing 'security of the cloud' (AWS) with 'security in the cloud' (you) - IAM misconfiguration is always your responsibility.
  • Assuming Bedrock trains on your prompts by default - it does not.
  • Mixing up Audit Manager (continuous compliance evidence) with Artifact (static compliance documents/reports).
  • Forgetting that CloudTrail is about API activity logging, not resource configuration - that's Config's job.
  • Thinking Clarify is only for bias - it also covers explainability of predictions.

Exam tip

When a question mentions 'who is responsible for X', default to the Shared Responsibility Model split. When it mentions bias/explainability, think Clarify; when it mentions drift/monitoring after deployment, think Model Monitor.

  • AWS secures 'OF the cloud' (infrastructure); the customer secures 'IN the cloud' (data, access, configuration).
  • Bedrock and SageMaker do NOT use customer prompts or outputs to train AWS's underlying models by default.
  • AWS KMS provides encryption at rest by default; customers can supply their own customer-managed key (CMK).
  • TLS secures data in transit; AWS PrivateLink/VPC endpoints keep Bedrock/SageMaker traffic off the public internet.
  • Amazon Macie scans S3 to discover and classify sensitive data such as PII.
  • AWS Artifact provides on-demand access to AWS's compliance reports (SOC, ISO, PCI) and agreements.
  • AWS Audit Manager continuously collects evidence to assess compliance against frameworks like GDPR and HIPAA.
  • AWS Config tracks and evaluates resource configuration changes against defined compliance rules.
  • AWS CloudTrail logs API calls across AWS accounts, giving an audit trail of who did what and when.
  • Amazon SageMaker Model Cards document a model's intended use, risks, and performance for governance.
  • Amazon SageMaker Model Monitor detects data and model drift once a model is deployed in production.
  • Amazon SageMaker Clarify detects bias in data and models and provides explainability for predictions.
  • Guardrails for Amazon Bedrock filter harmful content, block denied topics, redact PII, and reduce hallucinations.
In the Shared Responsibility Model, who secures the underlying infrastructure of an AI service like Bedrock?
AWS - this is 'security OF the cloud'.
tap to reveal
In the Shared Responsibility Model, who is responsible for IAM permissions and data protection choices?
The customer - this is 'security IN the cloud'.
tap to reveal
Does Amazon Bedrock use your prompts to train its foundation models by default?
No - customer data and prompts are never used to train AWS's base models by default.
tap to reveal
What service encrypts data at rest by default across Bedrock and SageMaker?
AWS KMS (customers can also supply their own customer-managed key).
tap to reveal
How do you keep Bedrock/SageMaker API traffic off the public internet?
Use AWS PrivateLink via a VPC endpoint.
tap to reveal
Which service discovers and classifies PII stored in S3?
Amazon Macie.
tap to reveal
What is AWS Artifact used for?
On-demand access to AWS's own compliance reports (SOC, ISO, PCI) and to accept agreements.
tap to reveal
What does AWS Audit Manager do?
Continuously collects evidence to assess risk and compliance against frameworks like GDPR or HIPAA.
tap to reveal
What is the difference between AWS Config and AWS CloudTrail?
Config tracks resource configuration changes and compliance drift; CloudTrail logs API call activity (who did what, when).
tap to reveal
What does a SageMaker Model Card record?
A model's intended use, risks, and performance - for governance documentation.
tap to reveal
What does SageMaker Model Monitor detect?
Data and model drift after a model is deployed to production.
tap to reveal
What does SageMaker Clarify provide?
Bias detection in data/models and explainability of predictions.
tap to reveal
What do Guardrails for Amazon Bedrock do?
Filter harmful content, block denied topics, redact PII, and reduce hallucinations via grounding checks.
tap to reveal
Which service would you use to prove compliance evidence is being continuously gathered for an audit?
AWS Audit Manager.
tap to reveal
True or false: encryption in transit for AI service calls uses TLS.
True.
tap to reveal