Loading controls...
Benchmark: SageMaker
Description
This section contains recommendations for configuring SageMaker resources.
Usage
Browse dashboards and select SageMaker:
steampipe dashboardOr run the benchmarks in your terminal:
steampipe check aws_compliance.benchmark.all_controls_sagemakerSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share aws_compliance.benchmark.all_controls_sagemakerControls
- SageMaker endpoint configuration encryption should be enabled
- SageMaker models should be in a VPC
- SageMaker models should have network isolation enabled
- SageMaker notebook instances should not have direct internet access
- SageMaker notebook instances should be encrypted using CMK
- SageMaker notebook instance encryption should be enabled
- SageMaker notebook instances should be in a VPC
- SageMaker notebook instances root access should be disabled
- SageMaker training jobs should be in VPC
- SageMaker training jobs should be enabled with inter-container traffic encryption
- SageMaker training jobs should have network isolation enabled
- SageMaker training jobs volumes and outputs should have KMS encryption enabled