Experiment notebooks and the production endpoint share one account and one IAM neighborhood. Sandbox principals can still reach live artifacts. What should they use to isolate production ML?
Select an answer to reveal the explanation.
Short Explanation
Experiment notebooks and the production endpoint share one account, so sandbox principals can still reach live artifacts. Put production ML in a separate Organizations account. A shared AdministratorAccess role is the problem, not the fix.
Full Explanation
AWS Organizations isolates production ML in its own account so sandbox principals cannot reach live endpoints or artifacts. A shared AdministratorAccess role in one account is the problem, not the fix. Polly is not an account boundary, and Model Monitor does not separate IAM neighborhoods.