sagemaker-endpoint-configuration-kms-key-configured
Checks if Amazon Key Management Service (Amazon KMS) key is configured for an Amazon SageMaker endpoint configuration. The rule is NON_COMPLIANT if 'KmsKeyId' is not specified for the Amazon SageMaker endpoint configuration.
Identifier: SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED
Resource Types: AWS::SageMaker::EndpointConfig
Trigger type: Periodic
Amazon Web Services Region: All supported Amazon regions except Asia Pacific (Thailand), Asia Pacific (Malaysia), Asia Pacific (Melbourne), Mexico (Central), Asia Pacific (Taipei) Region
Parameters:
- kmsKeyArns (Optional)
- Type: String
-
Comma-separated list of specific Amazon KMS key ARNs allowed for an Amazon SageMaker endpoint configuration.
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.