Query: SageMaker notebook instances should be encrypted using CMK

Description

This control checks if SageMaker notebook instance storage volumes are encrypted with AWS KMS Customer Master Keys (CMKs) instead of AWS managed-keys.

Query

Tables used in this query:

• aws_kms_key
• aws_sagemaker_notebook_instance

Controls using this query:

• SageMaker notebook instances should be encrypted using CMK

SQL