Skip to content

Commit 45387f6

Browse files
committed
revert back to fix cfn_nag issue for kmsKeyId
1 parent b8eaac3 commit 45387f6

File tree

1 file changed

+2
-3
lines changed
  • source/patterns/@aws-solutions-constructs/aws-lambda-sagemakerendpoint

1 file changed

+2
-3
lines changed

Diff for: source/patterns/@aws-solutions-constructs/aws-lambda-sagemakerendpoint/README.md

+2-3
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ _Parameters_
7676
| existingLambdaObj? | [`lambda.Function`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-lambda.Function.html) | An optional, existing Lambda function to be used instead of the default function. If an existing function is provided, the `lambdaFunctionProps` property will be ignored. |
7777
| lambdaFunctionProps? | [`lambda.FunctionProps`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-lambda.FunctionProps.html) | Optional user-provided properties to override the default properties for the Lambda function. Ignored if an `existingLambdaObj` is provided. | |
7878
| existingSagemakerEndpointObj? | [`sagemaker.CfnEndpoint`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-sagemaker.CfnEndpoint.html) | An optional, existing Sagemaker Enpoint to be used. if this is set then the `modelProps?`, `endpointConfigProps?`, and `endpointProps?` are ignored |
79-
| modelProps? | [`sagemaker.CfnModelProps`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-sagemaker.CfnModelProps.html) | Optional user-provided properties to override the default properties for the Sagemaker Model. Ignored if `existingSagemakerEndpointObj?` is provided. |
79+
| modelProps? | [`sagemaker.CfnModelProps`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-sagemaker.CfnModelProps.html) \| `any` | User-provided properties to override the default properties for the Sagemaker Model. At least `modelProps?.primaryContainer` must be provided to create a model. By default, the pattern will create a role with the minimum required permissions, but the client can provide a custom role with additional capabilities using `modelProps?.executionRoleArn`. `modelProps?` is ignored if `existingSagemakerEndpointObj?` is provided. |
8080
| endpointConfigProps? | [`sagemaker.CfnEndpointConfigProps`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-sagemaker.CfnEndpointConfigProps.html) | Optional user-provided properties to override the default properties for the Sagemaker Endpoint Config. Ignored if `existingSagemakerEndpointObj?` is provided. |
8181
| endpointProps? | [`sagemaker.CfnEndpointProps`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-sagemaker.CfnEndpointProps.html) | Optional user-provided properties to override the default properties for the Sagemaker Endpoint Config. Ignored if `existingSagemakerEndpointObj?` is provided. |
8282
| existingVpc? | `ec2.IVpc` | An optional, existing VPC into which this construct should be deployed. When deployed in a VPC, the Lambda function and Sagemaker Endpoint will use ENIs in the VPC to access network resources. An Interface Endpoint will be created in the VPC for Amazon Sagemaker Runtime, and Amazon S3 VPC Endpoint. If an existing VPC is provided, the `deployVpc?` property cannot be `true`. |
@@ -111,11 +111,10 @@ Out of the box implementation of the Construct without any override will set the
111111

112112
### Amazon Sagemaker Endpoint
113113

114+
- Configure limited privilege to create Sagemaker resources.
114115
- Deploy Sagemaker model, endpointConfig, and endpoint.
115-
- Enable server-side encryption for Sagemaker Endpoint using customer managed AWS KMS Key.
116116
- Configure the Sagemaker endpoint to be deployed in a VPC.
117117
- Deploy S3 VPC Endpoint and Sagemaker Runtime VPC Interface.
118-
- Enforce encryption of data in transit.
119118

120119
## Architecture
121120

0 commit comments

Comments
 (0)