Control: SageMaker models should have network isolation enabled
Description
SageMaker models are internet-enabled by default. Network isolation should be enabled to avoid external network access to your inference containers.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_model_network_isolation_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_model_network_isolation_enabled --shareSQL
This control uses a named query:
select arn as resource, case when enable_network_isolation then 'ok' else 'alarm' end as status, case when enable_network_isolation then title || ' network isolation enabled.' else title || ' network isolation disabled.' end as reason , region, account_idfrom aws_sagemaker_model;