Intro: Why I Took AIF-C01
I'm an AI engineer. I work with models, pipelines, and cloud infrastructure day to day. When I decided to take AIF-C01, the goal was straightforward — validate my understanding of how AWS thinks about AI and get a structured view of the full service landscape, not just the parts I already use on the job.
What I didn't expect was how much of the exam maps directly to security. There's an entire domain dedicated to it — Security, Compliance and Governance for AI — and the more I studied, the more I realised the security angle quietly threads through every other domain too.
This post is an honest account of the exam, what it actually covers, and what I found when I paid close attention to the parts most people skim.
Section 1: The Exam in Plain Terms
Domain Breakdown
AIF-C01 is AWS's foundational AI certification. Here's how the exam weight is distributed:
Domain & Weight:
Fundamentals of AI and ML
20%
Fundamentals of Generative AI
24%
Applications of Foundation Models
28%
Guidelines for Responsible AI
14%
Security, Compliance and Governance for AI
14%
The heaviest domain is Applications of Foundation Models — Bedrock, RAG pipelines, agents, prompt engineering, knowledge bases. If you're expecting a classical ML exam with regression algorithms and evaluation metrics, you'll be caught off guard. This exam is solidly GenAI-weighted.
Question Style
Every question is scenario-based. Not "define this term" — more like "your team needs to deploy a RAG-based chatbot with sensitive documents in the knowledge base. Which configuration achieves this with the least operational overhead while maintaining data privacy?"
The right answer usually comes down to:
Which managed AWS service fits the use case
AWS's recommended patterns — they consistently favour managed, guardrailed, least-privilege options
Understanding tradeoffs between cost, latency, control, and compliance
Difficulty
Honest take: moderate. If you've worked with AWS AI/ML services before, 4–6 weeks of structured study is enough. Coming in completely fresh, add 2–3 weeks.
The security and governance domain (14%) catches a lot of people out — not because it's technically hard, but because it requires a different mental model than the service-level domains. It's worth giving it proper attention rather than treating it as an afterthought.
Resources I Used
Stephane Maarek's AIF-C01 course (Udemy) — The backbone of my prep. Maarek covers every domain methodically and his walkthroughs of AWS service architectures are genuinely useful. If you have access through a corporate Udemy account, start here.
Abhishek Singh's Practice Exams — The differentiator. His questions run harder than the actual exam, which is exactly what you want. I read every explanation, including for questions I got right — because understanding why a wrong answer is wrong teaches more than just knowing the correct one.
One pattern I noticed: AWS exam answers are consistently more conservative than what a working engineer might instinctively choose. Prefer managed services. Prefer guardrails. Prefer least privilege. Internalising that pattern early calibrates your instincts correctly.
Section 2: The Security Content the Exam Actually Covers
The Security, Compliance and Governance domain is 14% of the exam, but security concepts quietly appear across all five domains. Here's what the exam actually tests, service by service.
Bedrock → Guardrails and Access Controls
Amazon Bedrock is the exam's most prominent service — managed access to foundation models from AWS and third-party providers. The exam covers it heavily from an architecture standpoint.
On the security side, the exam tests:
Guardrails for Amazon Bedrock — content filtering, topic denial policies, PII redaction, and grounding checks. The exam expects you to know when to use guardrails and what each filter layer does.
IAM and resource-based policies for Bedrock — who can invoke which models, cross-account access patterns, and how service control policies interact with Bedrock permissions.
Data privacy in Bedrock — whether your prompts and completions are used for model training (they're not, by default, in Bedrock), and how to handle sensitive data flowing through model inference.
SageMaker → IAM, Encryption, and Network Isolation
SageMaker gets significant exam coverage across training, deployment, and monitoring workflows. The security content is woven through all of it:
IAM execution roles — SageMaker jobs, notebook instances, and endpoints each run with an execution role. The exam tests least-privilege configuration: what permissions a training job actually needs versus what gets over-granted in practice.
Encryption — Data at rest in S3 (training datasets, model artifacts), encryption in transit between SageMaker components, and KMS key management for SageMaker resources.
Network isolation — Running training jobs and endpoints inside a VPC, disabling internet access for training containers, and using VPC endpoints to keep traffic off the public internet. The exam tests when and why you'd enforce this.
SageMaker Model Monitor — Detecting data drift and model quality degradation in production. The exam frames this as an operational and compliance tool, which it is.
RAG Pipelines → Access Controls on Knowledge Bases
RAG (Retrieval-Augmented Generation) is one of the most tested architectural patterns in AIF-C01. The flow is: user query → embedding → vector search → retrieved context → augmented prompt → model response.
The security content around RAG in the exam focuses on:
Bedrock Knowledge Bases access controls — who can query the knowledge base, how to restrict retrieval to authorised users, and how to handle multi-tenant scenarios where different users should only see different subsets of the knowledge base.
Data source permissions — Knowledge bases pull from S3, Confluence, SharePoint, and other connectors. The exam tests that the data source permissions are scoped correctly so the crawler only ingests what it's supposed to.
PII handling in retrieved context — When the knowledge base contains PII, the exam expects you to know that Guardrails PII redaction applies at inference time, not at ingestion time. Retrieved context with PII passes through the model unless explicitly filtered.
Responsible AI → What the Exam Actually Means by This
The Responsible AI domain covers: fairness, bias detection, explainability, transparency, and privacy. AWS tools here include SageMaker Clarify and Bedrock Guardrails.
SageMaker Clarify — The exam tests its two main functions: detecting bias in training data and model predictions (pre-training and post-training analysis), and producing SHAP-based explainability reports for model outputs.
Model Cards — Documenting model intended use, performance across demographic groups, and known limitations. The exam tests that you know what belongs in a model card and when AWS expects one.
The Responsible AI framework — AWS structures responsible AI around six pillars: fairness, explainability, privacy and security, safety, controllability, and verifiability. These map directly to exam questions, particularly in the governance domain.
One important distinction the exam implicitly makes — responsible AI and secure AI are related but not the same thing. Responsible AI asks: is the model treating users fairly and transparently? The security domain asks: are the underlying infrastructure and access controls properly locked down? Both appear in the exam. Understanding them as separate concerns helps you answer questions in each domain more precisely.
Compliance and Governance Specifics
The exam tests your knowledge of:
AWS AI Service Cards — AWS publishes service cards for its AI services documenting intended use cases, limitations, and responsible AI design decisions. The exam expects you to know these exist and what information they contain.
Shared responsibility model for AI — How the classic AWS shared responsibility model applies specifically to AI workloads. AWS secures the underlying infrastructure and managed service layer. You're responsible for data security, access controls, model configuration, and application-level guardrails.
AWS compliance programs — HIPAA eligibility, SOC 2, GDPR relevance for AI services. The exam doesn't go deep here but expects familiarity with which AWS AI services are in scope for major compliance frameworks.
Section 3: Resources — What Actually Helped
Stephane Maarek's course — Start here, no question. Comprehensive, well-structured, and the pacing is right for exam prep.
Abhishek Singh's practice exams — Read every single explanation. The difficulty is calibrated higher than the real exam, so by the time you're consistently hitting 80%+ on his sets, the actual exam feels manageable. The explanations on wrong answers are where the real learning is.
AWS Documentation for specific services — For Bedrock Guardrails and the Responsible AI domain specifically, reading the actual AWS docs gives you precision that course content sometimes glosses over. Guardrails configuration options and Clarify's bias metrics are worth reading directly from the source.
What I'd skip — Generic AI overview content that isn't AWS-specific. The exam is opinionated about AWS services and AWS-recommended patterns. General ML knowledge is useful context but won't get you through the scenario questions.
Closing Thoughts
AIF-C01 is a broader exam than the "Foundational" label suggests. The GenAI coverage is substantial, the security domain rewards careful study, and the scenario-based question format means surface-level knowledge isn't enough — you need to understand why AWS recommends specific patterns, not just what those patterns are.
The thing I found most valuable was paying close attention to the security domain rather than treating it as the easy 14%. The questions there are where the exam tests whether you actually understand how these services should be configured in production, not just what they do.
If you're preparing for AIF-C01, give the security and responsible AI domains proper time. They're not the hardest parts of the exam — but they're where a lot of points get dropped by people who focus entirely on the GenAI and application architecture content.
By Mihir Jalihal
My linkedIn - https://www.linkedin.com/in/mihir-jalihal-666bb125a/
GitHub -https://github.com/Mihirjalihal
See my Badge using this link - https://www.credly.com/badges/415b929c-3362-4bd6-b848-d75e80389065/public_url
