turbot/steampipe-mod-aws-compliance

Control: SageMaker training jobs should be in VPC

Description

Manage access to the AWS Cloud by ensuring SageMaker training jobs are within an AWS Virtual Private Cloud (AWS VPC).

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.sagemaker_training_job_in_vpc

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.sagemaker_training_job_in_vpc --share

SQL

This control uses a named query:

select
arn as resource,
case
when vpc_config is not null then 'ok'
else 'alarm'
end as status,
case
when vpc_config is not null then title || ' in VPC.'
else title || ' not in VPC.'
end as reason
, region, account_id
from
aws_sagemaker_training_job;

Tags