An internal model must not be reachable from the internet. What do you deploy to?
Why D is the answer
A private endpoint
A private endpoint keeps an internal model away from the internet.
In detail
- A private endpoint is not reachable from the internet.
- Clients must reach it through the private network.
Use case
An illustrative scenario, not a real incident.
An internal risk model must not be public, so it is deployed to a private endpoint.
See it in different ways
flowchart TD
A{"Is a caller waiting?"} -->|No| B["Batch inference"]
A -->|Yes| C{"How much control?"}
C -->|"Managed"| D["Agent Platform endpoint"]
C -->|"Own containers"| E["Cloud Run or GKE"]mindmap
root((Serving))
Online
Autoscaled backend
Batch
Overnight tables
Private endpoint
Internal only
Edge
No connection
Custom container
Any frameworkflowchart TD
Q{"Who are the clients?"}
Q -->|"Internal only"| A0["Private endpoint"]
Q -->|"Public apps"| A1["Public endpoint"]Key point: Private endpoints stay off the internet.
Why the other options are wrong
- A. A public endpoint
- That is reachable.
- B. A public Cloud Storage bucket
- That is reachable, and is not a serving endpoint.
- C. A shared notebook
- A notebook does not serve models.