> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/appsec-rules/iac-security/ai-and-machine-learning.md).

# AI And Machine Learning

| Rule Name                                                                                                                                                                                                             | AppSec Rule ID     | Severity |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------ | -------- |
| [AWS SageMaker notebook instance not configured with data encryption at rest using KMS key misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-22.md)                    | APPSEC\_AWS\_22    | LOW      |
| [AWS SageMaker endpoint data encryption at rest not configured misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-98.md)                                                | APPSEC\_AWS\_98    | HIGH     |
| [AWS SageMaker notebook instance configured with direct internet access feature misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-122.md)                              | APPSEC\_AWS\_122   | LOW      |
| [AWS Sagemaker domain not encrypted using Customer Managed Key misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-187.md)                                               | APPSEC\_AWS\_187   | LOW      |
| [AWS Kendra index Server side encryption does not use Customer Managed Keys (CMKs) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-262.md)                           | APPSEC\_AWS\_262   | LOW      |
| [AWS SageMaker notebook instance with root access enabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-307.md)                                                    | APPSEC\_AWS\_307   | LOW      |
| [AWS Sagemaker data quality job not encrypting model artifacts with KMS misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-367.md)                                      | APPSEC\_AWS\_367   | LOW      |
| [AWS Sagemaker data quality job not using KMS to encrypt data on attached storage volume misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-368.md)                     | APPSEC\_AWS\_368   | LOW      |
| [AWS Sagemaker data quality job not encrypting communications between instances used for monitoring jobs misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-369.md)     | APPSEC\_AWS\_369   | LOW      |
| [AWS SageMaker model does not use network isolation misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-370.md)                                                          | APPSEC\_AWS\_370   | MEDIUM   |
| [AWS SageMaker notebook instance allows for IMDSv1 misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-371.md)                                                           | APPSEC\_AWS\_371   | MEDIUM   |
| [AWS SageMaker Flow Definition does not use KMS for output configurations misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-372.md)                                    | APPSEC\_AWS\_372   | LOW      |
| [AWS Bedrock agent is not associated with Bedrock guardrails misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-383.md)                                                 | APPSEC\_AWS\_383   | LOW      |
| [Azure Synapse Workspaces do not enable managed virtual networks misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-58.md)                                            | APPSEC\_AZURE\_58  | LOW      |
| [Azure Cognitive Services account configured with public network access misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-134.md)                                    | APPSEC\_AZURE\_134 | HIGH     |
| [Azure Machine Learning Compute Cluster Local Authentication is enabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-142.md)                                    | APPSEC\_AZURE\_142 | LOW      |
| [Azure Machine Learning Workspace is publicly accessible misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-144.md)                                                   | APPSEC\_AZURE\_144 | LOW      |
| [Azure Machine Learning Compute Cluster Minimum Nodes is not set to 0 misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-150.md)                                      | APPSEC\_AZURE\_150 | LOW      |
| [Azure Data exfiltration protection for Azure Synapse workspace is disabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-157.md)                                | APPSEC\_AZURE\_157 | LOW      |
| [Azure Databricks workspace is public misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-158.md)                                                                      | APPSEC\_AZURE\_158 | LOW      |
| [Azure Cognitive Services account configured with local authentication misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-236.md)                                     | APPSEC\_AZURE\_236 | LOW      |
| [Azure Cognitive Services account is not configured with managed identity misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-238.md)                                  | APPSEC\_AZURE\_238 | LOW      |
| [Azure Synapse workspace administrator login password exposed misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-239.md)                                              | APPSEC\_AZURE\_239 | MEDIUM   |
| [Azure Synapse Workspace not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-240.md)                                   | APPSEC\_AZURE\_240 | LOW      |
| [Azure Synapse SQL pool not encrypted misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-241.md)                                                                      | APPSEC\_AZURE\_241 | LOW      |
| [Azure Synapse Spark Pool not using isolated compute misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-242.md)                                                       | APPSEC\_AZURE\_242 | LOW      |
| [Azure Machine learning workspace is not configured with private endpoint misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-243.md)                                  | APPSEC\_AZURE\_243 | MEDIUM   |
| [Azure Cognitive Services account hosted with OpenAI is not configured with data loss prevention misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-247.md)           | APPSEC\_AZURE\_247 | HIGH     |
| [GCP Vertex AI datasets do not use a Customer Manager Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-92.md)                                               | APPSEC\_GCP\_92    | LOW      |
| [GCP Vertex AI Metadata Store does not use a Customer Manager Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-96.md)                                       | APPSEC\_GCP\_96    | LOW      |
| [GCP Dataproc Clusters have public IPs misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-103.md)                                                                       | APPSEC\_GCP\_103   | HIGH     |
| [GCP DataFusion does not have stack driver logging enabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-104.md)                                                   | APPSEC\_GCP\_104   | LOW      |
| [GCP DataFusion does not have stack driver monitoring enabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-105.md)                                                | APPSEC\_GCP\_105   | LOW      |
| [GCP Vertex AI Workbench user-managed notebook has vTPM disabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-126.md)                                             | APPSEC\_GCP\_126   | LOW      |
| [GCP Vertex AI Workbench user-managed notebook has Integrity monitoring disabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-127.md)                             | APPSEC\_GCP\_127   | LOW      |
| [AWS SageMaker notebook instance IAM policy is overly permissive misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-aws-68.md)                                             | APPSEC2\_AWS\_68   | MEDIUM   |
| [Azure Synapse workspaces have IP firewall rules attached misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-19.md)                                                  | APPSEC2\_AZURE\_19 | LOW      |
| [Azure Cognitive Services does not Customer Managed Keys (CMKs) for encryption misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-22.md)                             | APPSEC2\_AZURE\_22 | LOW      |
| [Azure Synapse Workspace vulnerability assessment is disabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-46.md)                                              | APPSEC2\_AZURE\_46 | MEDIUM   |
| [Azure Databricks Workspaces not using customer-managed key for root DBFS encryption misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-48.md)                       | APPSEC2\_AZURE\_48 | LOW      |
| [Azure Machine learning workspace configured with overly permissive network access misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-49.md)                         | APPSEC2\_AZURE\_49 | HIGH     |
| [Azure Storage Account storing Machine Learning workspace high business impact data is publicly accessible misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-50.md) | APPSEC2\_AZURE\_50 | HIGH     |
| [Azure Synapse SQL Pool does not have a security alert policy misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-51.md)                                              | APPSEC2\_AZURE\_51 | LOW      |
| [Azure Synapse SQL Pool vulnerability assessment disabled misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-52.md)                                                  | APPSEC2\_AZURE\_52 | LOW      |
| [Azure Synapse Workspace does not have extended audit logs misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-53.md)                                                 | APPSEC2\_AZURE\_53 | LOW      |
| [Log monitoring disabled for Azure Synapse SQL Pool misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-54.md)                                                        | APPSEC2\_AZURE\_54 | LOW      |
| [Vertex AI endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-24.md)                                                | APPSEC2\_GCP\_24   | MEDIUM   |
| [Vertex AI featurestore is not configured to use a Customer Managed Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-25.md)                                | APPSEC2\_GCP\_25   | MEDIUM   |
| [Vertex AI tensorboard does not use a Customer Managed Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-26.md)                                             | APPSEC2\_GCP\_26   | MEDIUM   |
| [Vertex AI endpoint is public misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-33.md)                                                                                | APPSEC2\_GCP\_33   | MEDIUM   |
| [Vertex AI index endpoint is public misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-34.md)                                                                          | APPSEC2\_GCP\_34   | MEDIUM   |
| [Vertex AI runtime is not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-35.md)                                        | APPSEC2\_GCP\_35   | MEDIUM   |
| [Vertex AI runtime is public misconfiguration detected in code](/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-36.md)                                                                                 | APPSEC2\_GCP\_36   | MEDIUM   |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/appsec-rules/iac-security/ai-and-machine-learning.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.