Control types for @turbot/aws-sagemaker

• AWS > SageMaker > Code Repository > Active
• AWS > SageMaker > Code Repository > Approved
• AWS > SageMaker > Code Repository > CMDB
• AWS > SageMaker > Code Repository > Discovery
• AWS > SageMaker > Domain > Active
• AWS > SageMaker > Domain > Approved
• AWS > SageMaker > Domain > CMDB
• AWS > SageMaker > Domain > Discovery
• AWS > SageMaker > Domain > Tags
• AWS > SageMaker > Endpoint > Active
• AWS > SageMaker > Endpoint > Approved
• AWS > SageMaker > Endpoint > CMDB
• AWS > SageMaker > Endpoint > Discovery
• AWS > SageMaker > Endpoint > Tags
• AWS > SageMaker > Endpoint Configuration > Active
• AWS > SageMaker > Endpoint Configuration > Approved
• AWS > SageMaker > Endpoint Configuration > CMDB
• AWS > SageMaker > Endpoint Configuration > Discovery
• AWS > SageMaker > Endpoint Configuration > Tags
• AWS > SageMaker > Lifecycle Configuration > Active
• AWS > SageMaker > Lifecycle Configuration > Approved
• AWS > SageMaker > Lifecycle Configuration > CMDB
• AWS > SageMaker > Lifecycle Configuration > Discovery
• AWS > SageMaker > Model > Active
• AWS > SageMaker > Model > Approved
• AWS > SageMaker > Model > CMDB
• AWS > SageMaker > Model > Discovery
• AWS > SageMaker > Model > Tags
• AWS > SageMaker > Notebook Instance > Active
• AWS > SageMaker > Notebook Instance > Approved
• AWS > SageMaker > Notebook Instance > CMDB
• AWS > SageMaker > Notebook Instance > Discovery
• AWS > SageMaker > Notebook Instance > Tags
• AWS > SageMaker > Notebook Instance > Usage
• AWS > SageMaker > Training Job > Active
• AWS > SageMaker > Training Job > Approved
• AWS > SageMaker > Training Job > CMDB
• AWS > SageMaker > Training Job > Discovery
• AWS > SageMaker > Training Job > Tags

AWS > SageMaker > Code Repository > Active

Take an action when an AWS SageMaker code repository is not active based on the
AWS > SageMaker > Code Repository > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Code Repository > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Code Repository > Approved

Take an action when an AWS SageMaker code repository is not approved based on AWS > SageMaker > Code Repository > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Code Repository > CMDB

Record and synchronize details for the AWS SageMaker code repository into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Code Repository > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Code Repository > Discovery

Discover all AWS SageMaker code repository resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Code Repository > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Domain > Active

Take an action when an AWS SageMaker domain is not active based on the
AWS > SageMaker > Domain > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Domain > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Domain > Approved

Take an action when an AWS SageMaker domain is not approved based on AWS > SageMaker > Domain > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Domain > CMDB

Record and synchronize details for the AWS SageMaker domain into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Domain > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Domain > Discovery

Discover all AWS SageMaker domain resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Domain > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Domain > Tags

Take an action when an AWS SageMaker domain tags is not updated based on the AWS > SageMaker > Domain > Tags > * policies.

If the resource is not updated with the tags defined in AWS > SageMaker > Domain > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

AWS > SageMaker > Endpoint > Active

Take an action when an AWS SageMaker endpoint is not active based on the
AWS > SageMaker > Endpoint > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Endpoint > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Endpoint > Approved

Take an action when an AWS SageMaker endpoint is not approved based on AWS > SageMaker > Endpoint > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Endpoint > CMDB

Record and synchronize details for the AWS SageMaker endpoint into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Endpoint > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Endpoint > Discovery

Discover all AWS SageMaker endpoint resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Endpoint > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Endpoint > Tags

Take an action when an AWS SageMaker endpoint tags is not updated based on the AWS > SageMaker > Endpoint > Tags > * policies.

If the resource is not updated with the tags defined in AWS > SageMaker > Endpoint > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

AWS > SageMaker > Endpoint Configuration > Active

Take an action when an AWS SageMaker endpoint configuration is not active based on the
AWS > SageMaker > Endpoint Configuration > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Endpoint Configuration > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Endpoint Configuration > Approved

Take an action when an AWS SageMaker endpoint configuration is not approved based on AWS > SageMaker > Endpoint Configuration > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Endpoint Configuration > CMDB

Record and synchronize details for the AWS SageMaker endpoint configuration into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Endpoint Configuration > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Endpoint Configuration > Discovery

Discover all AWS SageMaker endpoint configuration resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Endpoint Configuration > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Endpoint Configuration > Tags

Take an action when an AWS SageMaker endpoint configuration tags is not updated based on the AWS > SageMaker > Endpoint Configuration > Tags > * policies.

If the resource is not updated with the tags defined in AWS > SageMaker > Endpoint Configuration > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

AWS > SageMaker > Lifecycle Configuration > Active

Take an action when an AWS SageMaker lifecycle configuration is not active based on the
AWS > SageMaker > Lifecycle Configuration > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Lifecycle Configuration > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Lifecycle Configuration > Approved

Take an action when an AWS SageMaker lifecycle configuration is not approved based on AWS > SageMaker > Lifecycle Configuration > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Lifecycle Configuration > CMDB

Record and synchronize details for the AWS SageMaker lifecycle configuration into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Lifecycle Configuration > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Lifecycle Configuration > Discovery

Discover all AWS SageMaker lifecycle configuration resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Lifecycle Configuration > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Model > Active

Take an action when an AWS SageMaker model is not active based on the
AWS > SageMaker > Model > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Model > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Model > Approved

Take an action when an AWS SageMaker model is not approved based on AWS > SageMaker > Model > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Model > CMDB

Record and synchronize details for the AWS SageMaker model into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Model > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Model > Discovery

Discover all AWS SageMaker model resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Model > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Model > Tags

Take an action when an AWS SageMaker model tags is not updated based on the AWS > SageMaker > Model > Tags > * policies.

If the resource is not updated with the tags defined in AWS > SageMaker > Model > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

AWS > SageMaker > Notebook Instance > Active

Take an action when an AWS SageMaker notebook instance is not active based on the
AWS > SageMaker > Notebook Instance > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Notebook Instance > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Notebook Instance > Approved

Take an action when an AWS SageMaker notebook instance is not approved based on AWS > SageMaker > Notebook Instance > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Notebook Instance > CMDB

Record and synchronize details for the AWS SageMaker notebook instance into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Notebook Instance > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Notebook Instance > Discovery

Discover all AWS SageMaker notebook instance resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Notebook Instance > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Notebook Instance > Tags

Take an action when an AWS SageMaker notebook instance tags is not updated based on the AWS > SageMaker > Notebook Instance > Tags > * policies.

If the resource is not updated with the tags defined in AWS > SageMaker > Notebook Instance > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

AWS > SageMaker > Notebook Instance > Usage

The Usage control determines whether the number of AWS SageMaker notebook instance resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > SageMaker > Notebook Instance > Usage policy, and set the limit with the AWS > SageMaker > Notebook Instance > Usage > Limit policy.

AWS > SageMaker > Training Job > Active

Take an action when an AWS SageMaker training job is not active based on the
AWS > SageMaker > Training Job > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > SageMaker > Training Job > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

AWS > SageMaker > Training Job > Approved

Take an action when an AWS SageMaker training job is not approved based on AWS > SageMaker > Training Job > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

AWS > SageMaker > Training Job > CMDB

Record and synchronize details for the AWS SageMaker training job into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > SageMaker > Training Job > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > SageMaker > Training Job > Discovery

Discover all AWS SageMaker training job resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > SageMaker > Training Job > Regions policy, the CMDB control will delete the resource from the CMDB.

AWS > SageMaker > Training Job > Tags

Take an action when an AWS SageMaker training job tags is not updated based on the AWS > SageMaker > Training Job > Tags > * policies.

If the resource is not updated with the tags defined in AWS > SageMaker > Training Job > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.