You work for a bank with strict data governance requirements. You recently implemented a custom model to detect fraudulent transactions. You want your training code to download internal data by using an API endpoint hosted in your projectβs network. You need the data to be accessed in the most secure way, while mitigating the risk of data exfiltration. What should you do?
- AEnable VPC Service Controls for peerings, and add Vertex AI to a service perimeter. (correct answer)
- BCreate a Cloud Run endpoint as a proxy to the data. Use Identity and Access Management (IAM) authentication to secure access to the endpoint from the training job.
- CConfigure VPC Peering with Vertex AI, and specify the network of the training job.
- DDownload the data to a Cloud Storage bucket before calling the training job.
Reveal answer & explanationHide answer
The correct answer is A. Option A: Enable VPC Service Controls for peerings, and add Vertex AI to a service perimeter.
Explanation
VPC Service Controls create a security perimeter around managed services to prevent data exfiltration. A VPC provides a global, software-defined private network for your Google Cloud resources. Vertex AI is the unified managed platform to build, train, tune, deploy, and operate ML models.