turbot/steampipe-mod-aws-compliance

Control: SageMaker notebook instances should not have direct internet access

Description

Manage access to resources in the AWS Cloud by ensuring that AWS SageMaker notebooks do not allow direct internet access.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.sagemaker_notebook_instance_direct_internet_access_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.sagemaker_notebook_instance_direct_internet_access_disabled --share

SQL

This control uses a named query:

select
arn as resource,
case
when direct_internet_access = 'Enabled' then 'alarm'
else 'ok'
end status,
case
when direct_internet_access = 'Enabled' then title || ' direct internet access enabled.'
else title || ' direct internet access disabled.'
end reason
, region, account_id
from
aws_sagemaker_notebook_instance;

Tags