The berry-harvest lake holds grower identifiers and must sit encrypted under a customer-managed key before any SageMaker job reads it. Which Domain 1 control is that?
Select an answer to reveal the explanation.
Short Explanation
Think of grower identifiers that must sit encrypted under a customer-managed key before SageMaker reads them. AWS KMS encryption at rest on the lake objects. That is Domain 1 prep, not a Domain 4 VPC project.
Full Explanation
AWS KMS encryption at rest on ML training artifacts and lake objects is a data-prep control, not a Domain 4 IAM redesign. Leaving objects clear and Polly are not that control.