Control: SageMaker training jobs should have network isolation enabled
Description
SageMaker training jobs are internet-enabled by default. Network isolation should be enabled to avoid external network access to your training.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.sagemaker_training_job_network_isolation_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.sagemaker_training_job_network_isolation_enabled --shareSQL
This control uses a named query:
select arn as resource, case when enable_network_isolation then 'ok' else 'alarm' end as status, case when enable_network_isolation then title || ' network isolation enabled.' else title || ' network isolation disabled.' end as reason , region, account_idfrom aws_sagemaker_training_job;