選取您的 Cookie 偏好設定

我們使用提供自身網站和服務所需的基本 Cookie 和類似工具。我們使用效能 Cookie 收集匿名統計資料,以便了解客戶如何使用我們的網站並進行改進。基本 Cookie 無法停用,但可以按一下「自訂」或「拒絕」以拒絕效能 Cookie。

如果您同意,AWS 與經核准的第三方也會使用 Cookie 提供實用的網站功能、記住您的偏好設定,並顯示相關內容,包括相關廣告。若要接受或拒絕所有非必要 Cookie,請按一下「接受」或「拒絕」。若要進行更詳細的選擇,請按一下「自訂」。

Networking architecture - Build a Secure Enterprise Machine Learning Platform on AWS
此頁面尚未翻譯為您的語言。 請求翻譯

Networking architecture

Enterprise ML platforms built on AWS normally have requirements to access on-premises resources, such as on-premises code repositories or databases. Secure communications such as AWS Direct Connect or VPN should be established. To enable flexible network routing across different AWS accounts and the on-prem network, consider using the AWS Transit Gateway service. If you want all internet traffic to go through your corporate network, configure an internet egress route to allow internet traffic to go through the on-premises network. The following figure shows a network design with multiple accounts and an on-premises environment.

A diagram showing networking design.

Networking design

For enhanced network security, you can configure resources in different AWS accounts to communicate via the Amazon Virtual Private Cloud (VPC) using VPC endpoints. A VPC endpoint enables private connections between your VPC and supported AWS services. There are different types of VPC endpoints such as interface endpoint and gateway endpoint. An interface endpoint is an elastic network interface (ENI) with a private IP address from the IP address range of your subnet that you can control network access using a VPC security group. To access resources inside a VPC, you need to establish a route to the subnet where your interface endpoint is located. A gateway endpoint is a gateway that you specify as a target for a route in your route table. You can control access to resources behind a VPC endpoint using a VPC endpoint policy.

For data scientists to use Amazon SageMaker AI, AWS recommend the following VPC endpoints:

The following figure shows the networking architecture for SageMaker AI with private endpoints for all the dependent services.

A diagram showing networking architecture for Amazon SageMaker AI Studio inside a VPC.

Networking architecture for Amazon SageMaker AI Studio inside a VPC (Not all VPC endpoints are shown for simplicity)

隱私權網站條款Cookie 偏好設定
© 2025, Amazon Web Services, Inc.或其附屬公司。保留所有權利。