Skip to main content

🧠 AWS SageMaker Endpoint Config does not specify a KMS key - prod.logic.yaml🟒

Uses​

Test Results πŸŸ’β€‹

Generated at: 2026-05-09T12:03:58.380595892Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒test1βœ”οΈ 99βœ”οΈ isDisappeared(CA10A1__disappearanceTime__c)βœ”οΈ null
🟒test2βœ”οΈ 199βœ”οΈ extract('CA10A1__kmsKeyId__c').isEmpty()βœ”οΈ null
🟒test3βœ”οΈ 200βœ”οΈ otherwiseβœ”οΈ null

Generation Bundle​

FileMD5
Open/ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/policy.yamlFC955743911B136EC0BB5EC06A0B7169
Open/ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/prod.logic.yamlCEEA740FF3E1D9F945A303F35E25DD14
Open/ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/test-data.jsonF094966C342DD7C8B311DDBF1FEA21D6
Open/types/CA10A1__CaAwsSageMakerEndpointConfig__c/object.extracts.yamlC98A8ED84E6D2328252FC7FA00A80C30

Available Commands​

repo-manager policies generate FULL /ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/sagemaker/endpoint-config-encryption-with-kms/prod.logic.yaml

Content​

Open File

---
inputType: "CA10A1__CaAwsSageMakerEndpointConfig__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10A1__CaAwsSageMakerEndpointConfig__c/object.extracts.yaml"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "A KMS key is not specified for the SageMaker endpoint configuration."
remediationMessage: "Specifying a KMS key for the endpoint configuration to encrypt data on the storage volume."
check:
IS_EMPTY:
arg:
EXTRACT: "CA10A1__kmsKeyId__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The SageMaker endpoint configuration uses a KMS key."