SageMaker geospatial capabilities

You can protect your data at rest using encryption for SageMaker geospatial.

Server-Side Encryption with Amazon SageMaker geospatial owned key (Default)

Amazon SageMaker geospatial capabilities encrypts all your data, including computational results from your EarthObservationJobs and VectorEnrichmentJobs along with all your service metadata. There is no data that is stored within Amazon SageMaker unencrypted. It uses a default AWS owned key to encrypt all your data.

Server-Side Encryption with KMS Keys Stored in AWS Key Management Service (SSE-KMS)

Amazon SageMaker geospatial capabilities supports encryption using a customer-owned KMS key. For more information, see Use AWS KMS Permissions for Amazon SageMaker geospatial capabilities.