Back to All Checks
Medium SageMaker Regional

SageMaker monitoring schedules should have inter-container traffic encryption enabled

Description

Flags Amazon SageMaker monitoring schedules whose underlying job definition does not enable inter-container traffic encryption. Traffic between distributed processing containers is then unencrypted.

Remediation

Recreate the monitoring schedule (or its referenced job definition) with EnableInterContainerTrafficEncryption=true.

Steps

  1. Identify the affected monitoring schedule via the SageMaker console.
  2. If it uses an inline MonitoringJobDefinition, recreate the schedule with NetworkConfig.EnableInterContainerTrafficEncryption=true.
  3. If it references a job definition by name, recreate that definition with EnableInterContainerTrafficEncryption=true and update the schedule to point at the new definition.
Start Your Free Security Check