sagemaker-featuregroup-encryption-at-rest
Checks if SageMaker feature groups have KMS encryption for OfflineStore. The rule is NON_COMPLIANT if offline store S3 storage does not have KMS key encryption.
Identifier: SAGEMAKER_FEATUREGROUP_ENCRYPTION_AT_REST
Resource Types: AWS::SageMaker::FeatureGroup
Trigger type: Configuration changes
Amazon Web Services Region: All supported Amazon regions except Asia Pacific (New Zealand), Middle East (Bahrain), Asia Pacific (Thailand), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), Asia Pacific (Melbourne), Amazon GovCloud (US-East), Amazon GovCloud (US-West), Mexico (Central), Asia Pacific (Taipei), Canada West (Calgary) Region
Parameters:
- None
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.