Domain 4 of 4 · Chapter 3 of 3

Securing ML Resources

Unlock the complete study guide + 1,040 practice questions across 16 full exams.

Bundled into the existing AWS Certified Machine Learning Engineer - Associate premium course — no separate purchase.

Included in this chapter:

  • Four control families, one mental model
  • Access control: execution roles, scoping, and Role Manager
  • Network isolation and encryption, layer by layer
  • Reading the exam stem: which control does it want

Four control families for securing an ML workload

Control familyPrimary mechanismWhat it protects againstDetective or preventive
Access controlIAM execution role + scoped policies, SageMaker Role Manager personasOver-broad permissions, the wrong principal calling SageMaker AIPreventive
Network isolationVpcConfig (subnets + security groups), VPC interface/gateway endpoints (PrivateLink), EnableNetworkIsolationData exfiltration, internet exposure of training/inferencePreventive
EncryptionKMS VolumeKmsKeyId + OutputDataConfig KmsKeyId at rest, EnableInterContainerTrafficEncryption in transitUnauthorized read of artifacts/data at rest or weights in transitPreventive
Audit & data protectionCloudTrail, IAM Access Analyzer, Amazon MacieUndetected access, external sharing, PII landing in datasetsDetective

Decision tree

What must the control protect?read the requirement in the stemAccess controlleast privilege / personawho may actNetworkno internet / privatetraffic pathEncryptionat rest / in transitthe bytesAuditdetectiveprove / policeScoped exec rolenot FullAccessRole Managerpersona rolesNet isolation+ VpcConfigVPC endpointsPrivateLinkCustomer KMS keyVolume + OutputInter-container enc.multi-node onlyCloudTrailAPI audit trailAccess Analyzerexternal / unusedAmazon MaciePII in S3job scopeteamno egressreach AWS svcat restin transitwho accessedexternal sharefind PIIAlways: a private VPC permits NAT egress; only EnableNetworkIsolation blocks all outbound.VolumeKmsKeyId is ignored on local NVMe instance storage.
Cheat sheet

Cheat sheet

  • SageMaker AI acts through an execution role, not your user
  • AmazonSageMakerFullAccess only covers SageMaker/aws-glue-named S3 buckets
  • VpcConfig keeps traffic in your VPC but still allows egress
  • EnableNetworkIsolation blocks all outbound calls from the container
  • Network isolation and a VPC combine; SageMaker downloads data separately
  • Chainer and RL managed containers cannot use network isolation
  • AWS Marketplace algorithms require network isolation
  • Reach AWS services privately with VPC endpoints and PrivateLink
  • Encrypt the ML storage volume with VolumeKmsKeyId
  • VolumeKmsKeyId is ignored on local NVMe instance storage
  • Encrypt model artifacts with OutputDataConfig KmsKeyId
  • Cross-account output requires a customer managed KMS key
  • EnableInterContainerTrafficEncryption protects distributed-training traffic
  • SageMaker Role Manager builds persona-based least-privilege roles
  • IAM Access Analyzer generates a least-privilege policy from CloudTrail
  • Access Analyzer flags resources shared with an external principal
  • CloudTrail is the audit trail for SageMaker AI API calls
  • Amazon Macie discovers PII in S3 before it reaches a training set
  • Secure a CI/CD pipeline with a scoped role and secrets in Secrets Manager
  • Map the security stem to one of four control families
  • GuardDuty auto-analyzes CloudTrail to detect credential exfiltration in ML workloads
  • CloudTrail Lake keeps events for years and lets you query them with SQL
  • Route SageMaker Endpoint State Change events through EventBridge to automate response
  • sourceIdentity attributes shared-role Studio actions to individual users in CloudTrail
  • A private REST API plus an aws:SourceVpce resource policy blocks public access
  • A Lambda authorizer validates third-party OAuth/JWT tokens and caches the decision

Unlock with Premium — includes all practice exams and the complete study guide.

Also tested in

References

  1. https://docs.aws.amazon.com/sagemaker/latest/dg/host-vpc.html
  2. https://docs.aws.amazon.com/sagemaker/latest/dg/mkt-algo-model-internet-free.html
  3. https://docs.aws.amazon.com/sagemaker/latest/dg/train-encrypt.html
  4. https://docs.aws.amazon.com/sagemaker/latest/dg/logging-using-cloudtrail.html
  5. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  6. https://docs.aws.amazon.com/macie/latest/user/what-is-macie.html
  7. https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-roles.html
  8. https://docs.aws.amazon.com/sagemaker/latest/dg/nbi-root-access.html
  9. https://docs.aws.amazon.com/sagemaker/latest/dg/role-manager.html
  10. https://docs.aws.amazon.com/sagemaker/latest/dg/encryption-at-rest-nbi.html