Sagemaker notebook data encrypted customer master keys remediation

Using Console

Using CLI

To remediate the misconfiguration of Notebook Data Encrypted with KMS Customer Master Keys for AWS DynamoDB using AWS CLI, follow these steps:Step 1: Identify the DynamoDB table that has the misconfiguration:

aws dynamodb list-tables

Step 2: Update the DynamoDB table to enable encryption with AWS managed keys:

aws dynamodb update-table \
    --table-name YOUR_TABLE_NAME \
    --sse-specification Enabled=true,SSEType=AES256

Step 3: Verify that the encryption has been updated successfully:

aws dynamodb describe-table \
    --table-name YOUR_TABLE_NAME

By following these steps, you can remediate the misconfiguration of Notebook Data Encrypted with KMS Customer Master Keys for AWS DynamoDB using AWS CLI.

Using Python

To remediate the misconfiguration of notebook data being encrypted with KMS Customer Master Keys in AWS DynamoDB using Python, follow these steps:

Update the DynamoDB Table Encryption: Configure the DynamoDB table to use AWS managed encryption instead of KMS Customer Master Keys. You can do this by updating the table settings to use the default AWS managed encryption.
Install the AWS SDK for Python (Boto3): If you haven’t already, install the Boto3 library, which is the AWS SDK for Python. You can install it using pip:

pip install boto3

Update the DynamoDB Table Encryption Settings: Use the following Python script to update the encryption settings of the DynamoDB table to use the default AWS managed encryption:

import boto3

# Specify the region where your DynamoDB table is located
region = 'your-region'

# Specify the name of the DynamoDB table
table_name = 'your-table-name'

# Create a DynamoDB client
dynamodb = boto3.client('dynamodb', region_name=region)

# Update the table encryption settings to use AWS managed encryption
response = dynamodb.update_table(
    TableName=table_name,
    SSESpecification={
        'Enabled': True,
        'SSEType': 'AES256'
    }
)

print("Table encryption settings updated successfully.")

Run the Python Script: Save the above Python script in a file (e.g., update_dynamodb_encryption.py) and run it using the Python interpreter. Make sure to replace 'your-region' and 'your-table-name' with the actual values for your DynamoDB table.

python update_dynamodb_encryption.py

Verify the Encryption Settings: After running the script, verify that the encryption settings for the DynamoDB table have been successfully updated to use the default AWS managed encryption. You can check this in the AWS Management Console or by using the Boto3 library to describe the table.

By following these steps, you can remediate the misconfiguration of notebook data being encrypted with KMS Customer Master Keys in AWS DynamoDB using Python.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Sagemaker notebook data encrypted customer master keys remediation

Triage and Remediation

Remediation