Control: SageMaker training jobs volumes and outputs should have KMS encryption enabled
Description
Ensure that SageMaker training jobs have volumes and outputs with KMS encryption enabled in order to have a more granular control over the data-at-rest encryption/decryption process and to meet compliance requirements.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_training_job_volume_and_data_encryption_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_training_job_volume_and_data_encryption_enabled --shareSQL
This control uses a named query:
sagemaker_training_job_volume_and_data_encryption_enabled