Every intern role can run s3:* on the bucket that holds the production model.tar.gz and captured inference payloads. What should they do?
Select an answer to reveal the explanation.
Short Explanation
Every intern can run s3: on the production model and capture bucket. Narrow IAM and the bucket policy so each principal reaches only the prefixes it needs. Leaving s3: or moving artifacts to a public bucket widens access.
Full Explanation
Least privilege on ML artifacts means each principal can reach only the S3 prefixes it needs, not s3: on the production model and capture bucket. Polly is not that control. Leaving s3: or moving artifacts to a public bucket widens access instead of narrowing it.