Back to All Checks
Medium SageMaker Regional

SageMaker models should use private registry in VPC for primary containers

Description

Flags SageMaker models whose PrimaryContainer pulls images via the public ECR endpoint rather than a private-VPC registry. Setting ImageConfig.RepositoryAccessMode='Vpc' forces image pulls to traverse the VPC endpoint and reuses VPC-level access controls.

Remediation

Recreate each affected model with PrimaryContainer.ImageConfig.RepositoryAccessMode='Vpc'.

Steps

  1. Identify the affected model via the SageMaker console.
  2. Create a new model (re-run create_model) with PrimaryContainer.ImageConfig.RepositoryAccessMode='Vpc' and a RepositoryAuthConfig if your registry is private.
  3. Update endpoints/training jobs to reference the new model.
Start Your Free Security Check