SageMaker notebook instance must not have direct internet access

High AWS General aws-sagemaker-notebookinstance-sagemaker-notebook

Applies to

AWS::SageMaker::NotebookInstance

What CGPulse checks

A resource passes this rule when directInternetAccess must equal Disabled. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Disable direct internet access and use VPC networking for secure outbound access. In AWS Console: SageMaker > Notebook instances > set Direct internet access to Disabled. See: https://docs.aws.amazon.com/sagemaker/latest/dg/appendix-notebook-and-internet-access.html

Terraform

resource "aws_sagemaker_notebook_instance" "{name}" {
  direct_internet_access = "Disabled"
  subnet_id              = aws_subnet.private.id
}

Compliance frameworks

Cloud Security: AWS Foundations

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan