SageMaker notebook instance should not allow direct internet access

What it checks

SageMaker notebook instance should not allow direct internet access

Where it applies

Terraform: aws_sagemaker_notebook_instance

CloudFormation: AWS::SageMaker::NotebookInstance

How to fix it

1. Set direct_internet_access = "Disabled" and place the notebook in a private subnet. Access the internet via NAT gateway or VPC endpoints.

Frameworks

• AWS FSBP SageMaker.1
• SOC 2 CC6.6

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules