@turbot/aws-sagemaker
The aws-sagemaker mod contains resource, control and policy definitions for AWS SageMaker service.
- Setting Policies Tutorial
- Mods Overview
- Policies Overview
- Resources Overview
- Common Policies and Controls
Recommended Version
Resource Types
- AWS > SageMaker
- AWS > SageMaker > Code Repository
- AWS > SageMaker > Domain
- AWS > SageMaker > Endpoint
- AWS > SageMaker > Endpoint Configuration
- AWS > SageMaker > Lifecycle Configuration
- AWS > SageMaker > Model
- AWS > SageMaker > Notebook Instance
- AWS > SageMaker > Training Job
Control Types
- AWS > SageMaker > Code Repository > Active
- AWS > SageMaker > Code Repository > Approved
- AWS > SageMaker > Code Repository > CMDB
- AWS > SageMaker > Code Repository > Discovery
- AWS > SageMaker > Domain > Active
- AWS > SageMaker > Domain > Approved
- AWS > SageMaker > Domain > CMDB
- AWS > SageMaker > Domain > Discovery
- AWS > SageMaker > Domain > Tags
- AWS > SageMaker > Endpoint > Active
- AWS > SageMaker > Endpoint > Approved
- AWS > SageMaker > Endpoint > CMDB
- AWS > SageMaker > Endpoint > Discovery
- AWS > SageMaker > Endpoint > Tags
- AWS > SageMaker > Endpoint Configuration > Active
- AWS > SageMaker > Endpoint Configuration > Approved
- AWS > SageMaker > Endpoint Configuration > CMDB
- AWS > SageMaker > Endpoint Configuration > Discovery
- AWS > SageMaker > Endpoint Configuration > Tags
- AWS > SageMaker > Lifecycle Configuration > Active
- AWS > SageMaker > Lifecycle Configuration > Approved
- AWS > SageMaker > Lifecycle Configuration > CMDB
- AWS > SageMaker > Lifecycle Configuration > Discovery
- AWS > SageMaker > Model > Active
- AWS > SageMaker > Model > Approved
- AWS > SageMaker > Model > CMDB
- AWS > SageMaker > Model > Discovery
- AWS > SageMaker > Model > Tags
- AWS > SageMaker > Notebook Instance > Active
- AWS > SageMaker > Notebook Instance > Approved
- AWS > SageMaker > Notebook Instance > CMDB
- AWS > SageMaker > Notebook Instance > Discovery
- AWS > SageMaker > Notebook Instance > Tags
- AWS > SageMaker > Notebook Instance > Usage
- AWS > SageMaker > Training Job > Active
- AWS > SageMaker > Training Job > Approved
- AWS > SageMaker > Training Job > CMDB
- AWS > SageMaker > Training Job > Discovery
- AWS > SageMaker > Training Job > Tags
Policy Types
- AWS > SageMaker > API Enabled
- AWS > SageMaker > Approved Regions [Default]
- AWS > SageMaker > Code Repository > Active
- AWS > SageMaker > Code Repository > Active > Age
- AWS > SageMaker > Code Repository > Active > Last Modified
- AWS > SageMaker > Code Repository > Approved
- AWS > SageMaker > Code Repository > Approved > Custom
- AWS > SageMaker > Code Repository > Approved > Regions
- AWS > SageMaker > Code Repository > Approved > Usage
- AWS > SageMaker > Code Repository > CMDB
- AWS > SageMaker > Code Repository > Regions
- AWS > SageMaker > Domain > Active
- AWS > SageMaker > Domain > Active > Age
- AWS > SageMaker > Domain > Active > Last Modified
- AWS > SageMaker > Domain > Approved
- AWS > SageMaker > Domain > Approved > Custom
- AWS > SageMaker > Domain > Approved > Encryption at Rest
- AWS > SageMaker > Domain > Approved > Encryption at Rest > Customer Managed Key
- AWS > SageMaker > Domain > Approved > Regions
- AWS > SageMaker > Domain > Approved > Usage
- AWS > SageMaker > Domain > CMDB
- AWS > SageMaker > Domain > Regions
- AWS > SageMaker > Domain > Tags
- AWS > SageMaker > Domain > Tags > Template
- AWS > SageMaker > Enabled
- AWS > SageMaker > Endpoint > Active
- AWS > SageMaker > Endpoint > Active > Age
- AWS > SageMaker > Endpoint > Active > Last Modified
- AWS > SageMaker > Endpoint > Approved
- AWS > SageMaker > Endpoint > Approved > Custom
- AWS > SageMaker > Endpoint > Approved > Regions
- AWS > SageMaker > Endpoint > Approved > Usage
- AWS > SageMaker > Endpoint > CMDB
- AWS > SageMaker > Endpoint > Regions
- AWS > SageMaker > Endpoint > Tags
- AWS > SageMaker > Endpoint > Tags > Template
- AWS > SageMaker > Endpoint Configuration > Active
- AWS > SageMaker > Endpoint Configuration > Active > Age
- AWS > SageMaker > Endpoint Configuration > Active > Last Modified
- AWS > SageMaker > Endpoint Configuration > Approved
- AWS > SageMaker > Endpoint Configuration > Approved > Custom
- AWS > SageMaker > Endpoint Configuration > Approved > Regions
- AWS > SageMaker > Endpoint Configuration > Approved > Usage
- AWS > SageMaker > Endpoint Configuration > CMDB
- AWS > SageMaker > Endpoint Configuration > Regions
- AWS > SageMaker > Endpoint Configuration > Tags
- AWS > SageMaker > Endpoint Configuration > Tags > Template
- AWS > SageMaker > Lifecycle Configuration > Active
- AWS > SageMaker > Lifecycle Configuration > Active > Age
- AWS > SageMaker > Lifecycle Configuration > Active > Last Modified
- AWS > SageMaker > Lifecycle Configuration > Approved
- AWS > SageMaker > Lifecycle Configuration > Approved > Custom
- AWS > SageMaker > Lifecycle Configuration > Approved > Regions
- AWS > SageMaker > Lifecycle Configuration > Approved > Usage
- AWS > SageMaker > Lifecycle Configuration > CMDB
- AWS > SageMaker > Lifecycle Configuration > Regions
- AWS > SageMaker > Model > Active
- AWS > SageMaker > Model > Active > Age
- AWS > SageMaker > Model > Active > Last Modified
- AWS > SageMaker > Model > Approved
- AWS > SageMaker > Model > Approved > Custom
- AWS > SageMaker > Model > Approved > Regions
- AWS > SageMaker > Model > Approved > Usage
- AWS > SageMaker > Model > CMDB
- AWS > SageMaker > Model > Regions
- AWS > SageMaker > Model > Tags
- AWS > SageMaker > Model > Tags > Template
- AWS > SageMaker > Notebook Instance > Active
- AWS > SageMaker > Notebook Instance > Active > Age
- AWS > SageMaker > Notebook Instance > Active > Budget
- AWS > SageMaker > Notebook Instance > Active > Last Modified
- AWS > SageMaker > Notebook Instance > Approved
- AWS > SageMaker > Notebook Instance > Approved > Budget
- AWS > SageMaker > Notebook Instance > Approved > Custom
- AWS > SageMaker > Notebook Instance > Approved > Regions
- AWS > SageMaker > Notebook Instance > Approved > Usage
- AWS > SageMaker > Notebook Instance > CMDB
- AWS > SageMaker > Notebook Instance > Regions
- AWS > SageMaker > Notebook Instance > Tags
- AWS > SageMaker > Notebook Instance > Tags > Template
- AWS > SageMaker > Notebook Instance > Usage
- AWS > SageMaker > Notebook Instance > Usage > Limit
- AWS > SageMaker > Permissions
- AWS > SageMaker > Permissions > Levels
- AWS > SageMaker > Permissions > Levels > Modifiers
- AWS > SageMaker > Permissions > Lockdown
- AWS > SageMaker > Permissions > Lockdown > API Boundary
- AWS > SageMaker > Regions
- AWS > SageMaker > Tags Template [Default]
- AWS > SageMaker > Training Job > Active
- AWS > SageMaker > Training Job > Active > Age
- AWS > SageMaker > Training Job > Active > Last Modified
- AWS > SageMaker > Training Job > Approved
- AWS > SageMaker > Training Job > Approved > Custom
- AWS > SageMaker > Training Job > Approved > Regions
- AWS > SageMaker > Training Job > Approved > Usage
- AWS > SageMaker > Training Job > CMDB
- AWS > SageMaker > Training Job > Regions
- AWS > SageMaker > Training Job > Tags
- AWS > SageMaker > Training Job > Tags > Template
- AWS > Turbot > Event Handlers > Events > Rules > Event Sources > @turbot/aws-sagemaker
- AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-sagemaker
- AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-sagemaker
- AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-sagemaker
Release Notes
5.10.0 (2024-03-13)
Bug fixes
- Unsupported US Gov cloud regions were inadvertently included in the
AWS > SageMaker > Code Repository > Regions
policy, which led to theAWS > SageMaker > Code Repository > Discovery
control being in an error state for those regions. We've now removed the unsupported US Gov cloud regions from the Regions policy.
Policy Types
- AWS > SageMaker > Notebook Instance > Approved > Custom
5.9.0 (2023-10-31)
What's new?
We've updated the runtime of the lambda functions to Node 18. You wouldn't notice any difference and things will continue to work smoothly and consistently as before.
Resource's metadata will now also include
createdBy
details in Turbot CMDB.Users can now perform quick actions on resources to remediate cloud configuration issues or skip Turbot alarms for issues that they want to come back to later. To get started, click on the
Actions
button, which will reveal a dropdown menu with available actions, and select one. See Quick Actions for more information.Added support for
ap-northeast-3
andus-gov-east-1
regions in theAWS > Sagemaker > Regions
policy.
Policy Types
- AWS > SageMaker > Code Repository > Approved > Custom
- AWS > SageMaker > Endpoint > Approved > Custom
- AWS > SageMaker > Endpoint Configuration > Approved > Custom
- AWS > SageMaker > Lifecycle Configuration > Approved > Custom
- AWS > SageMaker > Model > Approved > Custom
- AWS > SageMaker > Training Job > Approved > Custom
Action Types
- AWS > SageMaker > Code Repository > Delete from AWS
- AWS > SageMaker > Code Repository > Skip alarm for Active control
- AWS > SageMaker > Code Repository > Skip alarm for Active control [90 days]
- AWS > SageMaker > Code Repository > Skip alarm for Approved control
- AWS > SageMaker > Code Repository > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Domain > Delete from AWS
- AWS > SageMaker > Endpoint > Delete from AWS
- AWS > SageMaker > Endpoint > Set Tags
- AWS > SageMaker > Endpoint > Skip alarm for Active control
- AWS > SageMaker > Endpoint > Skip alarm for Active control [90 days]
- AWS > SageMaker > Endpoint > Skip alarm for Approved control
- AWS > SageMaker > Endpoint > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Endpoint > Skip alarm for Tags control
- AWS > SageMaker > Endpoint > Skip alarm for Tags control [90 days]
- AWS > SageMaker > Endpoint Configuration > Delete from AWS
- AWS > SageMaker > Endpoint Configuration > Set Tags
- AWS > SageMaker > Endpoint Configuration > Skip alarm for Active control
- AWS > SageMaker > Endpoint Configuration > Skip alarm for Active control [90 days]
- AWS > SageMaker > Endpoint Configuration > Skip alarm for Approved control
- AWS > SageMaker > Endpoint Configuration > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Endpoint Configuration > Skip alarm for Tags control
- AWS > SageMaker > Endpoint Configuration > Skip alarm for Tags control [90 days]
- AWS > SageMaker > Lifecycle Configuration > Delete from AWS
- AWS > SageMaker > Lifecycle Configuration > Skip alarm for Active control
- AWS > SageMaker > Lifecycle Configuration > Skip alarm for Active control [90 days]
- AWS > SageMaker > Lifecycle Configuration > Skip alarm for Approved control
- AWS > SageMaker > Lifecycle Configuration > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Model > Delete from AWS
- AWS > SageMaker > Model > Set Tags
- AWS > SageMaker > Model > Skip alarm for Active control
- AWS > SageMaker > Model > Skip alarm for Active control [90 days]
- AWS > SageMaker > Model > Skip alarm for Approved control
- AWS > SageMaker > Model > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Model > Skip alarm for Tags control
- AWS > SageMaker > Model > Skip alarm for Tags control [90 days]
- AWS > SageMaker > Notebook Instance > Delete from AWS
- AWS > SageMaker > Notebook Instance > Set Tags
- AWS > SageMaker > Notebook Instance > Skip alarm for Active control
- AWS > SageMaker > Notebook Instance > Skip alarm for Active control [90 days]
- AWS > SageMaker > Notebook Instance > Skip alarm for Approved control
- AWS > SageMaker > Notebook Instance > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Notebook Instance > Skip alarm for Tags control
- AWS > SageMaker > Notebook Instance > Skip alarm for Tags control [90 days]
- AWS > SageMaker > Training Job > Set Tags
- AWS > SageMaker > Training Job > Skip alarm for Active control
- AWS > SageMaker > Training Job > Skip alarm for Active control [90 days]
- AWS > SageMaker > Training Job > Skip alarm for Approved control
- AWS > SageMaker > Training Job > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Training Job > Skip alarm for Tags control
- AWS > SageMaker > Training Job > Skip alarm for Tags control [90 days]
5.8.0 (2023-02-10)
Policy Types
- AWS > SageMaker > Domain > Approved > Custom
- AWS > SageMaker > Domain > Approved > Encryption at Rest
- AWS > SageMaker > Domain > Approved > Encryption at Rest > Customer Managed Key
Action Types
- AWS > SageMaker > Domain > Set Tags
- AWS > SageMaker > Domain > Skip alarm for Active control
- AWS > SageMaker > Domain > Skip alarm for Active control [90 days]
- AWS > SageMaker > Domain > Skip alarm for Approved control
- AWS > SageMaker > Domain > Skip alarm for Approved control [90 days]
- AWS > SageMaker > Domain > Skip alarm for Tags control
- AWS > SageMaker > Domain > Skip alarm for Tags control [90 days]
5.7.0 (2021-11-23)
What's new?
- We've improved the details tables in the Tags controls to be more helpful, especially when a resource's tags are not set correctly as expected. Previously, to understand why the Tags controls were in an Alarm state, you would need to find and read the control's process logs. This felt like too much work for a simple task, so now these details are visible directly from the control page.
Resource Types
- AWS > SageMaker > Domain
Control Types
- AWS > SageMaker > Domain > Active
- AWS > SageMaker > Domain > Approved
- AWS > SageMaker > Domain > CMDB
- AWS > SageMaker > Domain > Discovery
- AWS > SageMaker > Domain > Tags
Policy Types
- AWS > SageMaker > Domain > Active
- AWS > SageMaker > Domain > Active > Age
- AWS > SageMaker > Domain > Active > Last Modified
- AWS > SageMaker > Domain > Approved
- AWS > SageMaker > Domain > Approved > Regions
- AWS > SageMaker > Domain > Approved > Usage
- AWS > SageMaker > Domain > CMDB
- AWS > SageMaker > Domain > Regions
- AWS > SageMaker > Domain > Tags
- AWS > SageMaker > Domain > Tags > Template
Action Types
- AWS > SageMaker > Domain > Delete
- AWS > SageMaker > Domain > Router
- AWS > SageMaker > Domain > Update Tags
5.6.0 (2021-06-11)
Resource Types
- AWS > SageMaker > Notebook Instance
Control Types
- AWS > SageMaker > Notebook Instance > Active
- AWS > SageMaker > Notebook Instance > Approved
- AWS > SageMaker > Notebook Instance > CMDB
- AWS > SageMaker > Notebook Instance > Discovery
- AWS > SageMaker > Notebook Instance > Tags
- AWS > SageMaker > Notebook Instance > Usage
Policy Types
- AWS > SageMaker > Notebook Instance > Active
- AWS > SageMaker > Notebook Instance > Active > Age
- AWS > SageMaker > Notebook Instance > Active > Budget
- AWS > SageMaker > Notebook Instance > Active > Last Modified
- AWS > SageMaker > Notebook Instance > Approved
- AWS > SageMaker > Notebook Instance > Approved > Budget
- AWS > SageMaker > Notebook Instance > Approved > Regions
- AWS > SageMaker > Notebook Instance > Approved > Usage
- AWS > SageMaker > Notebook Instance > CMDB
- AWS > SageMaker > Notebook Instance > Regions
- AWS > SageMaker > Notebook Instance > Tags
- AWS > SageMaker > Notebook Instance > Tags > Template
- AWS > SageMaker > Notebook Instance > Usage
- AWS > SageMaker > Notebook Instance > Usage > Limit
Action Types
- AWS > SageMaker > Notebook Instance > Delete
- AWS > SageMaker > Notebook Instance > Router
- AWS > SageMaker > Notebook Instance > Stop
- AWS > SageMaker > Notebook Instance > Update Tags
5.5.0 (2021-05-11)
Resource Types
- AWS > SageMaker > Endpoint
Control Types
- AWS > SageMaker > Endpoint > Active
- AWS > SageMaker > Endpoint > Approved
- AWS > SageMaker > Endpoint > CMDB
- AWS > SageMaker > Endpoint > Discovery
- AWS > SageMaker > Endpoint > Tags
Policy Types
- AWS > SageMaker > Endpoint > Active
- AWS > SageMaker > Endpoint > Active > Age
- AWS > SageMaker > Endpoint > Active > Last Modified
- AWS > SageMaker > Endpoint > Approved
- AWS > SageMaker > Endpoint > Approved > Regions
- AWS > SageMaker > Endpoint > Approved > Usage
- AWS > SageMaker > Endpoint > CMDB
- AWS > SageMaker > Endpoint > Regions
- AWS > SageMaker > Endpoint > Tags
- AWS > SageMaker > Endpoint > Tags > Template
Action Types
- AWS > SageMaker > Endpoint > Delete
- AWS > SageMaker > Endpoint > Router
- AWS > SageMaker > Endpoint > Update Tags
5.4.0 (2021-05-03)
Resource Types
- AWS > SageMaker > Model
- AWS > SageMaker > Training Job
Control Types
- AWS > SageMaker > Model > Active
- AWS > SageMaker > Model > Approved
- AWS > SageMaker > Model > CMDB
- AWS > SageMaker > Model > Discovery
- AWS > SageMaker > Model > Tags
- AWS > SageMaker > Training Job > Active
- AWS > SageMaker > Training Job > Approved
- AWS > SageMaker > Training Job > CMDB
- AWS > SageMaker > Training Job > Discovery
- AWS > SageMaker > Training Job > Tags
Policy Types
- AWS > SageMaker > Model > Active
- AWS > SageMaker > Model > Active > Age
- AWS > SageMaker > Model > Active > Last Modified
- AWS > SageMaker > Model > Approved
- AWS > SageMaker > Model > Approved > Regions
- AWS > SageMaker > Model > Approved > Usage
- AWS > SageMaker > Model > CMDB
- AWS > SageMaker > Model > Regions
- AWS > SageMaker > Model > Tags
- AWS > SageMaker > Model > Tags > Template
- AWS > SageMaker > Training Job > Active
- AWS > SageMaker > Training Job > Active > Age
- AWS > SageMaker > Training Job > Active > Last Modified
- AWS > SageMaker > Training Job > Approved
- AWS > SageMaker > Training Job > Approved > Regions
- AWS > SageMaker > Training Job > Approved > Usage
- AWS > SageMaker > Training Job > CMDB
- AWS > SageMaker > Training Job > Regions
- AWS > SageMaker > Training Job > Tags
- AWS > SageMaker > Training Job > Tags > Template
Action Types
- AWS > SageMaker > Model > Delete
- AWS > SageMaker > Model > Router
- AWS > SageMaker > Model > Update Tags
- AWS > SageMaker > Training Job > Router
- AWS > SageMaker > Training Job > Update Tags
5.3.0 (2021-04-21)
Resource Types
- AWS > SageMaker > Endpoint Configuration
- AWS > SageMaker > Lifecycle Configuration
Control Types
- AWS > SageMaker > Endpoint Configuration > Active
- AWS > SageMaker > Endpoint Configuration > Approved
- AWS > SageMaker > Endpoint Configuration > CMDB
- AWS > SageMaker > Endpoint Configuration > Discovery
- AWS > SageMaker > Endpoint Configuration > Tags
- AWS > SageMaker > Lifecycle Configuration > Active
- AWS > SageMaker > Lifecycle Configuration > Approved
- AWS > SageMaker > Lifecycle Configuration > CMDB
- AWS > SageMaker > Lifecycle Configuration > Discovery
Policy Types
- AWS > SageMaker > Endpoint Configuration > Active
- AWS > SageMaker > Endpoint Configuration > Active > Age
- AWS > SageMaker > Endpoint Configuration > Active > Last Modified
- AWS > SageMaker > Endpoint Configuration > Approved
- AWS > SageMaker > Endpoint Configuration > Approved > Regions
- AWS > SageMaker > Endpoint Configuration > Approved > Usage
- AWS > SageMaker > Endpoint Configuration > CMDB
- AWS > SageMaker > Endpoint Configuration > Regions
- AWS > SageMaker > Endpoint Configuration > Tags
- AWS > SageMaker > Endpoint Configuration > Tags > Template
- AWS > SageMaker > Lifecycle Configuration > Active
- AWS > SageMaker > Lifecycle Configuration > Active > Age
- AWS > SageMaker > Lifecycle Configuration > Active > Last Modified
- AWS > SageMaker > Lifecycle Configuration > Approved
- AWS > SageMaker > Lifecycle Configuration > Approved > Regions
- AWS > SageMaker > Lifecycle Configuration > Approved > Usage
- AWS > SageMaker > Lifecycle Configuration > CMDB
- AWS > SageMaker > Lifecycle Configuration > Regions
Action Types
- AWS > SageMaker > Endpoint Configuration > Delete
- AWS > SageMaker > Endpoint Configuration > Router
- AWS > SageMaker > Endpoint Configuration > Update Tags
- AWS > SageMaker > Lifecycle Configuration > Delete
- AWS > SageMaker > Lifecycle Configuration > Router
5.2.0 (2021-04-09)
Resource Types
- AWS > SageMaker > Code Repository
Control Types
- AWS > SageMaker > Code Repository > Active
- AWS > SageMaker > Code Repository > Approved
- AWS > SageMaker > Code Repository > CMDB
- AWS > SageMaker > Code Repository > Discovery
Policy Types
- AWS > SageMaker > Code Repository > Active
- AWS > SageMaker > Code Repository > Active > Age
- AWS > SageMaker > Code Repository > Active > Last Modified
- AWS > SageMaker > Code Repository > Approved
- AWS > SageMaker > Code Repository > Approved > Regions
- AWS > SageMaker > Code Repository > Approved > Usage
- AWS > SageMaker > Code Repository > CMDB
- AWS > SageMaker > Code Repository > Regions
Action Types
- AWS > SageMaker > Code Repository > Delete
- AWS > SageMaker > Code Repository > Router
5.1.0 (2020-09-03)
What's new?
- We've renamed the service's default regions policy from
Regions [Default]
toRegions
to be consistent with our other regions policies.
5.0.1 (2020-07-06)
Bug fixes
- Updated various resource configurations to provide better compatibility with AWS China regions.
5.0.0 (2020-05-27)
Resource Types
- AWS > SageMaker
Policy Types
- AWS > Guardrails > Event Handlers > Events > Rules > Event Sources > @turbot/aws-sagemaker
- AWS > Guardrails > Permissions > Compiled > API Boundary > @turbot/aws-sagemaker
- AWS > Guardrails > Permissions > Compiled > Levels > @turbot/aws-sagemaker
- AWS > Guardrails > Permissions > Compiled > Service Permissions > @turbot/aws-sagemaker
- AWS > SageMaker > API Enabled
- AWS > SageMaker > Approved Regions [Default]
- AWS > SageMaker > Enabled
- AWS > SageMaker > Permissions
- AWS > SageMaker > Permissions > Levels
- AWS > SageMaker > Permissions > Levels > Modifiers
- AWS > SageMaker > Permissions > Lockdown
- AWS > SageMaker > Permissions > Lockdown > API Boundary
- AWS > SageMaker > Regions [Default]
- AWS > SageMaker > Tags Template [Default]