turbot/aws_perimeter
GitHub
Loading controls...

Control: SageMaker notebook instances should be prohibited from direct internet access

Description

Access to internet could provide an avenue for unauthorized access to your data. Ensure that SageMaker notebook instances do not allow direct internet access.

Usage

Run the control in your terminal:

steampipe check aws_perimeter.control.sagemaker_notebook_instance_direct_internet_access_disabled

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_perimeter.control.sagemaker_notebook_instance_direct_internet_access_disabled

Plugins & Tables

SQL

select
arn as resource,
case
when direct_internet_access = 'Enabled' then 'alarm'
else 'ok'
end status,
case
when direct_internet_access = 'Enabled' then title || ' instance has direct internet access enabled.'
else title || ' instance has direct internet access disabled.'
end reason,
region,
account_id
from
aws_sagemaker_notebook_instance;

Tags