Control: SageMaker notebook instances root access should be disabled
Description
Users with root access have administrator privileges and users can access and edit all files on a notebook instance. It is recommeneded to disable root access to restrict users from accessing and editing all the files.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_notebook_instance_root_access_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_notebook_instance_root_access_disabled --shareSQL
This control uses a named query:
select arn as resource, case when root_access = 'Disabled' then 'ok' else 'alarm' end as status, case when root_access = 'Disabled' then title || ' root access disabled.' else title || ' root access enabled.' end as reason , region, account_idfrom aws_sagemaker_notebook_instance;