Amazon_SageMaker_2

Ensure that SageMaker is placed in VPC

Description

A SageMaker notebook instance is a Machine Learning (ML) compute instance running on Jupyter Notebook software. You can connect to your notebook instance from your VPC through an interface endpoint in your Virtual Private Cloud (VPC), instead of connecting over the internet. Ensure that your AWS SageMaker notebook instances placed in the VPC, to only access VPC resources for. AWS VPCs provides the controls to facilitate a formal process for approving and testing all network connections and changes to the firewall and router configurations.

Remediation

There is no possibility to move existing SageMaker notebook under VPC if they were not created inside VPC. To ensure that your AWS SageMaker notebook instances are running inside a VPC, you need to re-create these.:
1. To create an Amazon SageMaker Notebook Instance, Please refer to the following AWS instructions:

2. https://docs.aws.amazon.com/sagemaker/latest/dg/gs-setup-working-env.html

Service

SageMaker

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!