Aws Intercontainer Encryption Disabled
Description
Detects AWS SageMaker training jobs that have inter-container traffic encryption disabled. When disabled, communication between training containers is not encrypted, potentially exposing sensitive data and model parameters to unauthorized access within the network.
Detection Strategy
• Examines all SageMaker training jobs in the specified AWS region
• Reports a vulnerability when a training job has EnableInterContainerTrafficEncryption set to false
• Identifies affected resources by their Training Job ARN and includes the encryption setting value in the report
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, fill out this contact form.