Medium
SageMaker
Regional
SageMaker monitoring schedules should have network isolation enabled
Description
Flags Amazon SageMaker monitoring schedules whose underlying job definition has NetworkConfig.EnableNetworkIsolation disabled. The schedule inherits the network configuration of either an inline MonitoringJobDefinition or a referenced external job definition.
Remediation
Recreate the monitoring schedule (or its referenced job definition) with EnableNetworkIsolation=true.
Steps
- Identify the affected monitoring schedule via the SageMaker console.
- If it uses an inline MonitoringJobDefinition, recreate the schedule with NetworkConfig.EnableNetworkIsolation=true.
- If it references a job definition by name, recreate that definition with EnableNetworkIsolation=true and update the schedule to point at the new definition.