Ensure AWS SageMaker notebook instance is configured with direct internet access feature

Error: AWS SageMaker notebook instance is not configured with direct internet access feature

Bridgecrew Policy ID: BC_AWS_NETWORKING_38
Checkov Check ID: CKV_AWS_122
Severity: MEDIUM

AWS SageMaker notebook instance is not configured with direct internet access feature

Description

We recommend that Direct Internet Access is enabled for an Amazon SageMaker Notebook Instances.
TBA.

Fix - Buildtime

Terraform

  • Resource: aws_sagemaker_notebook_instance
  • Argument: direct_internet_access
resource "aws_sagemaker_notebook_instance" "test" {
                  name          = "my-notebook-instance"
                  role_arn      = aws_iam_role.role.arn
                  instance_type = "ml.t2.medium"
+                 direct_internet_access = "Disabled"
                                  
                  tags = {
                    Name = "foo"
                  }
                }