AWS securityhub documentation change
Summary
Updated control titles to remove 'AI' references, added regional availability note, and adjusted AWS Config rule link formatting
Security assessment
Changes involve terminology updates (removing 'AI' from control names), formatting adjustments for Config rule links, and adding regional availability information. No evidence of addressing specific vulnerabilities or security incidents.
Diff
diff --git a/securityhub/latest/userguide/sagemaker-controls.md b/securityhub/latest/userguide/sagemaker-controls.md index 42c7a862b..25c4f4714 100644 --- a/securityhub/latest/userguide/sagemaker-controls.md +++ b/securityhub/latest/userguide/sagemaker-controls.md @@ -5 +5 @@ -[SageMaker.1] Amazon SageMaker AI notebook instances should not have direct internet access[SageMaker.2] SageMaker AI notebook instances should be launched in a custom VPC[SageMaker.3] Users should not have root access to SageMaker AI notebook instances[SageMaker.4] SageMaker AI endpoint production variants should have an initial instance count greater than 1[SageMaker.5] SageMaker models should block inbound traffic +[SageMaker.1] Amazon SageMaker notebook instances should not have direct internet access[SageMaker.2] SageMaker notebook instances should be launched in a custom VPC[SageMaker.3] Users should not have root access to SageMaker notebook instances[SageMaker.4] SageMaker endpoint production variants should have an initial instance count greater than 1[SageMaker.5] SageMaker models should block inbound traffic @@ -9 +9 @@ -These AWS Security Hub controls evaluate the Amazon SageMaker AI service and resources. +These AWS Security Hub controls evaluate the Amazon SageMaker AI service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -11,3 +11 @@ These AWS Security Hub controls evaluate the Amazon SageMaker AI service and res -These controls may not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). - -## [SageMaker.1] Amazon SageMaker AI notebook instances should not have direct internet access +## [SageMaker.1] Amazon SageMaker notebook instances should not have direct internet access @@ -23 +21 @@ These controls may not be available in all AWS Regions. For more information, se -**AWS Config rule:** [`sagemaker-notebook-no-direct-internet-access`](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-no-direct-internet-access.html) +**AWS Config rule:** [sagemaker-notebook-no-direct-internet-access](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-no-direct-internet-access.html) @@ -37 +35 @@ You can't change the internet access setting after creating a notebook instance. -## [SageMaker.2] SageMaker AI notebook instances should be launched in a custom VPC +## [SageMaker.2] SageMaker notebook instances should be launched in a custom VPC @@ -47 +45 @@ You can't change the internet access setting after creating a notebook instance. -**AWS Config rule:** [`sagemaker-notebook-instance-inside-vpc`](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-inside-vpc.html) +**AWS Config rule:** [sagemaker-notebook-instance-inside-vpc](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-inside-vpc.html) @@ -61 +59 @@ You can't change the VPC setting after creating a notebook instance. Instead, yo -## [SageMaker.3] Users should not have root access to SageMaker AI notebook instances +## [SageMaker.3] Users should not have root access to SageMaker notebook instances @@ -71 +69 @@ You can't change the VPC setting after creating a notebook instance. Instead, yo -**AWS Config rule:** [`sagemaker-notebook-instance-root-access-check`](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-root-access-check.html) +**AWS Config rule:** [sagemaker-notebook-instance-root-access-check](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-root-access-check.html) @@ -85 +83 @@ To restrict root access to SageMaker AI notebook instances, see [Control root ac -## [SageMaker.4] SageMaker AI endpoint production variants should have an initial instance count greater than 1 +## [SageMaker.4] SageMaker endpoint production variants should have an initial instance count greater than 1 @@ -95 +93 @@ To restrict root access to SageMaker AI notebook instances, see [Control root ac -**AWS Config rule:** [`sagemaker-endpoint-config-prod-instance-count`](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-endpoint-config-prod-instance-count.html) +**AWS Config rule:** [sagemaker-endpoint-config-prod-instance-count](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-endpoint-config-prod-instance-count.html)