Checks if an AWS Key Management Service (AWS KMS) key is configured for an Amazon SageMaker notebook instance. The rule is NON_COMPLIANT if 'KmsKeyId' is not specified for the SageMaker notebook instance.
Identifier: SAGEMAKER_NOTEBOOK_INSTANCE_KMS_KEY_CONFIGURED
Resource Types: AWS::SageMaker::NotebookInstance
Trigger type: Periodic
AWS Region: All supported AWS regions except Asia Pacific (Thailand), Asia Pacific (Malaysia), Asia Pacific (Melbourne), Mexico (Central) Region
Parameters:
- kmsKeyArns (Optional)
- Type: String
-
Comma-separated list of AWS KMS key ARNs allowed for an Amazon SageMaker notebook instance.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
