Amazon SageMaker Notebook instances can be configured to allow or deny direct internet access. If direct internet access is allowed, it may pose security risks as the instances can potentially communicate with the internet and expose sensitive data or resources. Ensuring that SageMaker Notebook Direct Internet Access is disabled is triggered when a notebook instance is detected to have direct internet access enabled. The violation is raised to alert the user to disable direct internet access to the notebook instance to reduce the risk of unauthorized access to the instance and data. This rule is particularly relevant in cases where the notebook instances are used for sensitive data processing or analysis.
To ensure SageMaker Notebook Direct Internet Access is disabled, you can take the following steps:
It is important to note that disabling direct internet access may impact the functionality of some notebooks that require internet access to function properly. Therefore, it is recommended that you test the notebook instance thoroughly after disabling direct internet access to ensure that it continues to function as intended.