turbot/aws_compliance

Control: SageMaker notebook instances should be encrypted using CMK

Description

This control checks if SageMaker notebook instance storage volumes are encrypted with AWS KMS Customer Master Keys (CMKs) instead of AWS managed-keys.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.sagemaker_notebook_instance_encrypted_with_kms_cmk

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.sagemaker_notebook_instance_encrypted_with_kms_cmk --share

SQL

This control uses a named query:

sagemaker_notebook_instance_encrypted_with_kms_cmk

Tags