sagemaker-endpoint-configuration-kms-key-configured
Checks if AWS Key Management Service (AWS KMS) key is configured for an Amazon SageMaker endpoint configuration. The rule is NON_COMPLIANT if 'KmsKeyId' is not specified for the Amazon SageMaker endpoint configuration.
Identifier: SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED
Resource Types: AWS::SageMaker::EndpointConfig
Trigger type: Periodic
AWS Region: All supported AWS regions except China (Beijing), Asia Pacific (Thailand), Asia Pacific (Malaysia), Asia Pacific (Melbourne), Mexico (Central), China (Ningxia) Region
Parameters:
- kmsKeyArns (Optional)
- Type: String
-
Comma-separated list of specific AWS KMS key ARNs allowed for an Amazon SageMaker endpoint configuration.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.