Check ID: sagemaker_training_jobs_volume_and_output_encryption_enabled
Provider: AWS
Service: sagemaker
Severity: HIGH
Categories: encryption, gen-ai
Resource type: Other

​
What this check verifies

Amazon SageMaker training jobs use KMS encryption for their attached ML storage volumes via VolumeKmsKeyId. The finding identifies training jobs where the volume encryption key is not configured.

​
Risk

Missing CMEK leaves training data, checkpoints, and logs on the volume without tenant-controlled encryption. This reduces confidentiality, enables data exposure via snapshots or privileged access, and limits control over key policies, rotation, and emergency revocation.

​
Recommendation

Encrypt training volumes with customer-managed KMS keys and apply the same to S3 input/output. Use least privilege on key policies, enable rotation, restrict grants, and prevent storage of unencrypted artifacts to achieve defense in depth.

​
Remediation

# SageMaker Training Job with EBS volume KMS encryption enabled
resource "aws_sagemaker_training_job" "<example_resource_name>" {
  name     = "<example_resource_name>"
  role_arn = "<example_role_arn>"

  algorithm_specification {
    training_image      = "<example_ecr_image_uri>"
    training_input_mode = "File"
  }

  output_data_config {
    s3_output_path = "s3://<example_bucket>"
  }

  resource_config {
    instance_type     = "ml.m5.large"
    instance_count    = 1
    volume_size_in_gb = 10
    volume_kms_key_id = "<example_kms_key_arn>" # CRITICAL: Enables KMS encryption for the training EBS volume
  }

  stopping_condition {
    max_runtime_in_seconds = 3600
  }
}

​
References

​
Where this check fires

This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable by Check ID = sagemaker_training_jobs_volume_and_output_encryption_enabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to AWS checks