Control: SageMaker notebook instances should not have direct internet access
Description
Manage access to resources in the AWS Cloud by ensuring that AWS SageMaker notebooks do not allow direct internet access.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_notebook_instance_direct_internet_access_disabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_notebook_instance_direct_internet_access_disabled --share
SQL
This control uses a named query:
select arn as resource, case when direct_internet_access = 'Enabled' then 'alarm' else 'ok' end status, case when direct_internet_access = 'Enabled' then title || ' direct internet access enabled.' else title || ' direct internet access disabled.' end reason , region, account_idfrom aws_sagemaker_notebook_instance;