sagemaker-inf-experiment-data-storage-kms-encrypted
Checks whether a SageMaker inference experiment with data capture enabled has a customer-managed KMS key for encrypting captured data at rest. The rule is NON_COMPLIANT if DataStorageConfig.KmsKey is not set or is empty.
Identifier: SAGEMAKER_INF_EXPERIMENT_DATA_STORAGE_KMS_ENCRYPTED
Resource Types: AWS::SageMaker::InferenceExperiment
Trigger type: Configuration changes
AWS Region: All supported AWS regions except Asia Pacific (New Zealand), Middle East (Bahrain), China (Beijing), Asia Pacific (Thailand), Asia Pacific (Jakarta), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Mexico (Central), Israel (Tel Aviv), Asia Pacific (Taipei), Canada West (Calgary), Europe (Spain), China (Ningxia), Europe (Zurich) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
