AWS Certified AI Practitioner AIF-C01 Reddit Questions

The correct answer is AWS Artifact, which is a central resource for accessing AWS compliance documentation, audit reports, and certifications from both AWS and third-party providers, including ISVs. According to AWS documentation, Artifact supports notifications for newly available reports. Customers can subscribe to notification emails when specific compliance documents or updates are published. This feature is ideal for regulated industries or companies needing third-party verification of compliance and security postures. Artifact provides access to reports such as SOC 2, ISO, PCI, and more, and is commonly used for audit preparation and vendor risk management. In contrast, AWS Audit Manager helps create internal audit frameworks but is not focused on third-party report distribution. AWS Data Exchange is for marketplace data sharing, and Trusted Advisor provides performance and cost optimization recommendations, not compliance document alerts. Thus, AWS Artifact is the purpose-built service that meets this requirement.

Referenced AWS AI/ML Documents and Study Guides:

AWS Artifact Documentation – Compliance Reports and Subscriptions

AWS Security and Compliance Whitepaper – Using Artifact for Third-Party Assurance

The correct answer is D because Few-shot prompting involves providing the LLM with a few examples of the expected input-output format. This helps the model learn and mimic the pattern or structure required in the response — such as generating product descriptions that follow a specific template.

From AWS documentation:

"Few-shot prompting helps guide the model to produce structured and domain-specific outputs by supplying a small number of example inputs and corresponding outputs."

Explanation of other options:

A. Zero-shot prompting provides no examples, which may lead to inconsistent formatting.

B. Chain-of-thought prompting is used to guide reasoning steps, not formatting.

C. One-shot prompting uses a single example, but few-shot typically yields better structure adherence.

Referenced AWS AI/ML Documents and Study Guides:

AWS Prompt Engineering Guide

Amazon Bedrock Developer Documentation – Prompting Techniques

AWS ML Specialty Study Guide – LLM Prompting Patterns

The ecommerce company’s chatbot, powered by AI, automates customer order submissions and is accessible 24/7 via the website. Prompt injection is an AI system input vulnerability where malicious users craft inputs to manipulate the chatbot’s behavior, such as bypassing safeguards or accessing unauthorized information. This vulnerability must be resolved before the chatbot is made available to ensure security.

Exact Extract from AWS AI Documents:

From the AWS Bedrock User Guide:

"Prompt injection is a vulnerability in AI systems, particularly chatbots, where malicious inputs can manipulate the model’s behavior, potentially leading to unauthorized actions or harmful outputs. Implementing guardrails and input validation can mitigate this risk."

(Source: AWS Bedrock User Guide, Security Best Practices)

Detailed Explanation:

Option A: Data leakageData leakage refers to the unintended exposure of sensitive data during model training or inference, not an input vulnerability affecting a chatbot’s operation.

Option B: Prompt injectionThis is the correct answer. Prompt injection is a critical input vulnerability for chatbots, where malicious prompts can exploit the AI to produce harmful or unauthorized responses, a risk that must be addressed before launch.

Option C: Large language model (LLM) hallucinationsLLM hallucinations refer to the model generating incorrect or ungrounded responses, which is an output issue, not an input vulnerability.

Option D: Concept driftConcept drift occurs when the data distribution changes over time, affecting model performance. It is not an input vulnerability but a long-term performance issue.

Amazon Bedrock Guardrails allow developers to create safeguards that filter harmful content and prevent sensitive topics from being discussed. This functionality helps mitigate prompt injection attacks with minimal implementation effort. According to the official Amazon Bedrock documentation:

“You can configure Guardrails for Amazon Bedrock to define denied topics, use content filters, and apply sensitive information filters, offering protection against prompt injection attacks with minimal development effort.”