Medium
SageMaker
Regional
SageMaker inference experiments should have instance storage volume encrypted with customer managed AWS KMS keys
Description
Flags Amazon SageMaker inference experiments with no KMS key for instance-storage-volume encryption. Without a key the ML storage volume relies on the default AWS-owned key.
Remediation
Recreate each inference experiment with a customer managed KmsKey set.
Steps
- Identify the affected inference experiment via the SageMaker console.
- Re-create it (create_inference_experiment) with KmsKey pointing at a customer managed KMS key.
- Resume the experiment once the new configuration is in place.