Control: SageMaker training jobs should be in VPC
Description
Manage access to the AWS Cloud by ensuring SageMaker training jobs are within an AWS Virtual Private Cloud (AWS VPC).
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_training_job_in_vpcSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_training_job_in_vpc --shareSQL
This control uses a named query:
select  arn as resource,  case    when vpc_config is not null then 'ok'    else 'alarm'  end as status,  case    when vpc_config is not null then title || ' in VPC.'    else title || ' not in VPC.'  end as reason    , region, account_idfrom  aws_sagemaker_training_job;