Control types for @turbot/aws-sagemaker
- AWS > SageMaker > Code Repository > Active
- AWS > SageMaker > Code Repository > Approved
- AWS > SageMaker > Code Repository > CMDB
- AWS > SageMaker > Code Repository > Discovery
- AWS > SageMaker > Domain > Active
- AWS > SageMaker > Domain > Approved
- AWS > SageMaker > Domain > CMDB
- AWS > SageMaker > Domain > Discovery
- AWS > SageMaker > Domain > Tags
- AWS > SageMaker > Endpoint > Active
- AWS > SageMaker > Endpoint > Approved
- AWS > SageMaker > Endpoint > CMDB
- AWS > SageMaker > Endpoint > Discovery
- AWS > SageMaker > Endpoint > Tags
- AWS > SageMaker > Endpoint Configuration > Active
- AWS > SageMaker > Endpoint Configuration > Approved
- AWS > SageMaker > Endpoint Configuration > CMDB
- AWS > SageMaker > Endpoint Configuration > Discovery
- AWS > SageMaker > Endpoint Configuration > Tags
- AWS > SageMaker > Lifecycle Configuration > Active
- AWS > SageMaker > Lifecycle Configuration > Approved
- AWS > SageMaker > Lifecycle Configuration > CMDB
- AWS > SageMaker > Lifecycle Configuration > Discovery
- AWS > SageMaker > Model > Active
- AWS > SageMaker > Model > Approved
- AWS > SageMaker > Model > CMDB
- AWS > SageMaker > Model > Discovery
- AWS > SageMaker > Model > Tags
- AWS > SageMaker > Notebook Instance > Active
- AWS > SageMaker > Notebook Instance > Approved
- AWS > SageMaker > Notebook Instance > CMDB
- AWS > SageMaker > Notebook Instance > Discovery
- AWS > SageMaker > Notebook Instance > Tags
- AWS > SageMaker > Notebook Instance > Usage
- AWS > SageMaker > Training Job > Active
- AWS > SageMaker > Training Job > Approved
- AWS > SageMaker > Training Job > CMDB
- AWS > SageMaker > Training Job > Discovery
- AWS > SageMaker > Training Job > Tags
AWS > SageMaker > Code Repository > Active
Take an action when an AWS SageMaker code repository is not active based on the
AWS > SageMaker > Code Repository > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Code Repository > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Code Repository > Approved
Take an action when an AWS SageMaker code repository is not approved based on AWS > SageMaker > Code Repository > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Code Repository > CMDB
Record and synchronize details for the AWS SageMaker code repository into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Code Repository > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Code Repository > Discovery
Discover all AWS SageMaker code repository resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Code Repository > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Domain > Active
Take an action when an AWS SageMaker domain is not active based on the
AWS > SageMaker > Domain > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Domain > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Domain > Approved
Take an action when an AWS SageMaker domain is not approved based on AWS > SageMaker > Domain > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Domain > CMDB
Record and synchronize details for the AWS SageMaker domain into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Domain > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Domain > Discovery
Discover all AWS SageMaker domain resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Domain > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Domain > Tags
Take an action when an AWS SageMaker domain tags is not updated based on the AWS > SageMaker > Domain > Tags > * policies
.
If the resource is not updated with the tags defined in AWS > SageMaker > Domain > Tags > Template
, this control raises an alarm and takes the defined enforcement action.
See Tags for more information.
AWS > SageMaker > Endpoint > Active
Take an action when an AWS SageMaker endpoint is not active based on the
AWS > SageMaker > Endpoint > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Endpoint > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Endpoint > Approved
Take an action when an AWS SageMaker endpoint is not approved based on AWS > SageMaker > Endpoint > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Endpoint > CMDB
Record and synchronize details for the AWS SageMaker endpoint into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Endpoint > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Endpoint > Discovery
Discover all AWS SageMaker endpoint resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Endpoint > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Endpoint > Tags
Take an action when an AWS SageMaker endpoint tags is not updated based on the AWS > SageMaker > Endpoint > Tags > * policies
.
If the resource is not updated with the tags defined in AWS > SageMaker > Endpoint > Tags > Template
, this control raises an alarm and takes the defined enforcement action.
See Tags for more information.
AWS > SageMaker > Endpoint Configuration > Active
Take an action when an AWS SageMaker endpoint configuration is not active based on the
AWS > SageMaker > Endpoint Configuration > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Endpoint Configuration > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Endpoint Configuration > Approved
Take an action when an AWS SageMaker endpoint configuration is not approved based on AWS > SageMaker > Endpoint Configuration > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Endpoint Configuration > CMDB
Record and synchronize details for the AWS SageMaker endpoint configuration into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Endpoint Configuration > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Endpoint Configuration > Discovery
Discover all AWS SageMaker endpoint configuration resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Endpoint Configuration > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Endpoint Configuration > Tags
Take an action when an AWS SageMaker endpoint configuration tags is not updated based on the AWS > SageMaker > Endpoint Configuration > Tags > * policies
.
If the resource is not updated with the tags defined in AWS > SageMaker > Endpoint Configuration > Tags > Template
, this control raises an alarm and takes the defined enforcement action.
See Tags for more information.
AWS > SageMaker > Lifecycle Configuration > Active
Take an action when an AWS SageMaker lifecycle configuration is not active based on the
AWS > SageMaker > Lifecycle Configuration > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Lifecycle Configuration > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Lifecycle Configuration > Approved
Take an action when an AWS SageMaker lifecycle configuration is not approved based on AWS > SageMaker > Lifecycle Configuration > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Lifecycle Configuration > CMDB
Record and synchronize details for the AWS SageMaker lifecycle configuration into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Lifecycle Configuration > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Lifecycle Configuration > Discovery
Discover all AWS SageMaker lifecycle configuration resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Lifecycle Configuration > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Model > Active
Take an action when an AWS SageMaker model is not active based on the
AWS > SageMaker > Model > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Model > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Model > Approved
Take an action when an AWS SageMaker model is not approved based on AWS > SageMaker > Model > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Model > CMDB
Record and synchronize details for the AWS SageMaker model into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Model > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Model > Discovery
Discover all AWS SageMaker model resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Model > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Model > Tags
Take an action when an AWS SageMaker model tags is not updated based on the AWS > SageMaker > Model > Tags > * policies
.
If the resource is not updated with the tags defined in AWS > SageMaker > Model > Tags > Template
, this control raises an alarm and takes the defined enforcement action.
See Tags for more information.
AWS > SageMaker > Notebook Instance > Active
Take an action when an AWS SageMaker notebook instance is not active based on the
AWS > SageMaker > Notebook Instance > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Notebook Instance > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Notebook Instance > Approved
Take an action when an AWS SageMaker notebook instance is not approved based on AWS > SageMaker > Notebook Instance > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Notebook Instance > CMDB
Record and synchronize details for the AWS SageMaker notebook instance into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Notebook Instance > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Notebook Instance > Discovery
Discover all AWS SageMaker notebook instance resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Notebook Instance > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Notebook Instance > Tags
Take an action when an AWS SageMaker notebook instance tags is not updated based on the AWS > SageMaker > Notebook Instance > Tags > * policies
.
If the resource is not updated with the tags defined in AWS > SageMaker > Notebook Instance > Tags > Template
, this control raises an alarm and takes the defined enforcement action.
See Tags for more information.
AWS > SageMaker > Notebook Instance > Usage
The Usage control determines whether the number of AWS SageMaker notebook instance resources exceeds the configured usage limit for this account.
You can configure the behavior of this control with the AWS > SageMaker > Notebook Instance > Usage
policy, and set the limit with the AWS > SageMaker > Notebook Instance > Usage > Limit
policy.
AWS > SageMaker > Training Job > Active
Take an action when an AWS SageMaker training job is not active based on the
AWS > SageMaker > Training Job > Active > *
policies.
The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.
The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Training Job > Active > *
),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.
Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.
See Active for more information.
AWS > SageMaker > Training Job > Approved
Take an action when an AWS SageMaker training job is not approved based on AWS > SageMaker > Training Job > Approved > * policies
.
The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new
, e.g., Enforce: Delete unapproved if new
, this control will only take the enforcement actions for resources created within the last 60 minutes.
See Approved for more information.
AWS > SageMaker > Training Job > CMDB
Record and synchronize details for the AWS SageMaker training job into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Training Job > Regions
policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)
AWS > SageMaker > Training Job > Discovery
Discover all AWS SageMaker training job resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Training Job > Regions
policy, the CMDB control will delete the resource from the CMDB.
AWS > SageMaker > Training Job > Tags
Take an action when an AWS SageMaker training job tags is not updated based on the AWS > SageMaker > Training Job > Tags > * policies
.
If the resource is not updated with the tags defined in AWS > SageMaker > Training Job > Tags > Template
, this control raises an alarm and takes the defined enforcement action.
See Tags for more information.