Control: SageMaker notebook instances should be in a VPC
Description
Manage access to the AWS Cloud by ensuring SageMaker notebook instances are within an AWS Virtual Private Cloud (AWS VPC).
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_notebook_instance_in_vpc
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_notebook_instance_in_vpc --share
SQL
This control uses a named query:
select arn as resource, case when subnet_id is not null then 'ok' else 'alarm' end as status, case when subnet_id is not null then title || ' in VPC.' else title || ' not in VPC.' end as reason , region, account_idfrom aws_sagemaker_notebook_instance;