AWS SageMaker notebook instance configured with direct internet access feature misconfiguration dete

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_122
Category - Subcategory	Public Exposure - Ingress Controls
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	f7743e85-4180-44d9-b383-d45821eb0d90

Impact

We recommend that Direct Internet Access is enabled for an Amazon SageMaker Notebook Instances.

How to Fix

Resource: aws_sagemaker_notebook_instance

• Arguments: direct_internet_access [source,go]

---

resource "aws_sagemaker_notebook_instance" "test" { name = "my-notebook-instance" role_arn = aws_iam_role.role.arn instance_type = "ml.t2.medium"

• direct_internet_access = "Disabled"

tags = { Name = "foo" } }