A collection of configuration templates for Amazon SageMaker resources as well as security controls for monitoring and protecting Amazon SageMaker configuration such as Config Rules, CloudWatch Alarms, EventBridge Rules, IAM policies, and more.
This template creates an Amazon SageMaker endpoint with data capture enabled. It also includes the necessary resources such as an endpoint configuration, model, IAM roles, and a data quality job definition.
This template creates an Amazon SageMaker endpoint configuration, which specifies the ML model and resources to use for inference. It also creates an IAM role for the SageMaker service to assume, allowing it to access necessary resources.
This template creates a SageMaker endpoint configuration with a production variant that specifies the initial instance count, variant weight, instance type, model name, and variant name. It also creates a SageMaker endpoint using the endpoint configuration.
This template creates an Amazon SageMaker endpoint with an endpoint configuration, model, and execution role. The endpoint is used for deploying machine learning models.
This template creates an AWS SageMaker model bias job that analyzes the bias in a machine learning model. The job uses a specified endpoint and ground truth data to generate monitoring outputs and provide insights into potential bias in the model's predictions.
This template creates the necessary resources to run a model explainability job in Amazon SageMaker. It sets up an endpoint, endpoint configuration, model, IAM roles, and a model explainability job definition.
This template creates the necessary resources to define and execute a model quality job in Amazon SageMaker. It includes an endpoint, endpoint configuration, model, execution role, job definition, and other required configurations.
This template creates a SageMaker endpoint with monitoring capabilities. It sets up an endpoint, endpoint configuration, model, and monitoring schedule to analyze the endpoint's data and generate insights.
This template creates a SageMaker notebook instance with the specified instance type and role.
This template creates a basic SageMaker notebook instance with an execution role and lifecycle configuration. The notebook instance is launched with a t2.medium instance type and runs a simple 'hello' command on start.
This template creates a SageMaker Pipeline with an associated lifecycle configuration. The Pipeline Definition is provided as a JSON string.
This template creates a SageMaker Pipeline with an associated lifecycle configuration. The Pipeline Definition is provided as an S3 location.
This template creates an AWS SageMaker Project.
A config rule that checks whether direct internet access is disabled for an Amazon SageMaker notebook instance. The rule is NON_COMPLIANT if Amazon SageMaker notebook instances are internet-enabled.
A config rule that checks whether an AWS Key Management Service (KMS) key is configured for Amazon SageMaker notebook instance. The rule is not NON_COMPLIANT if kmsKeyId is not specified for the Amazon SageMaker notebook instance.
A config rule that checks whether AWS Key Management Service (KMS) key is configured for an Amazon SageMaker endpoint configuration. The rule is NON_COMPLIANT if KmsKeyId is not specified for the Amazon SageMaker endpoint configuration.
Checks if an Amazon SageMaker notebook instance is launched within a VPC or within a list of approved subnets. The rule is NON_COMPLIANT if a notebook instance is not launched within a VPC or if its subnet ID is not included in the parameter list.
Checks if the Amazon SageMaker RootAccess setting is enabled for Amazon SageMaker notebook instances. The rule is NON_COMPLIANT if the RootAccess setting is set to ‘Enabled’ for an Amazon SageMaker notebook instance.