Back to All Checks
Medium SageMaker Regional

SageMaker data quality job definitions should have inter-container traffic encryption enabled

Description

Flags Amazon SageMaker data quality monitoring job definitions whose NetworkConfig.EnableInterContainerTrafficEncryption is disabled. Without it, traffic between containers in a distributed processing job is unencrypted on the data-plane network.

Remediation

Recreate the job definition with NetworkConfig.EnableInterContainerTrafficEncryption=true.

Steps

  1. Identify the affected job definition via the SageMaker console or the CLI.
  2. Recreate the job definition (re-run create_data_quality_job_definition) with NetworkConfig.EnableInterContainerTrafficEncryption set to true.
  3. Update any monitoring schedules pointing at the old definition.
Start Your Free Security Check