Studio and Model Monitor jobs run in a custom VPC. Schedules fail because the job cannot reach Amazon S3 or CloudWatch without a public hop. What should they add?
Select an answer to reveal the explanation.
Short Explanation
Studio and Model Monitor run in a custom VPC and cannot reach S3 or CloudWatch. Add VPC endpoints for those services. A constraint file is not network reachability, and dropping the VPC is not the security design.
Full Explanation
Model Monitor and jobs in a custom VPC need VPC endpoints for S3, CloudWatch, and related APIs so they do not require a public hop. A constraint file is not network reachability. Lex is not that endpoint, and dropping the VPC is not the security design.