All checks
Medium
SageMaker model explainability job definitions should have inter-container traffic encryption enabled
Flags Amazon SageMaker model explainability monitoring job definitions whose NetworkConfig.EnableInterContainerTrafficEncryption is disabled.
- service
- SageMaker
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Set at creation: fixing it means replacing the resource.
Set NetworkConfig.EnableInterContainerTrafficEncryption to true on the model explainability job definition the finding names by ARN. There is no update operation for one, so create a replacement identical apart from this setting, repoint every monitoring schedule and anything else that names the old definition, and only then delete it. The replacement carries a new name. Where the definition has a VpcConfig, its security group needs inbound and outbound rules for the encrypted transport.
See which of your accounts this check is failing on.
Book a demo