sagemaker-endpoint-configuration-kms-key-configured

Checks whether AWS Key Management Service (KMS) key is configured for an Amazon SageMaker endpoint configuration. The rule is NON_COMPLIANT if KmsKeyId is not specified for the Amazon SageMaker endpoint configuration.

Identifier: SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED

Trigger type: Periodic

AWS Region: All supported AWS Regions except AWS GovCloud (US-East), China (Beijing), China (Ningxia), Africa (Cape Town) and Europe (Milan)

Parameters:

kmsKeyArns

(Optional) Comma-separated list of specific AWS KMS key ARNs allowed for an Amazon SageMaker endpoint configuration.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.