Question

A healthcare company runs SageMaker training and processing jobs from notebook instances that process protected health information (PHI). Security requires that these workloads can reach only approved S3 buckets and SageMaker APIs, must never traverse the public internet, and must be blocked from writing PHI to any S3 bucket outside the company's account. Which combination of controls best enforces these requirements?

Accepted Answer

Launch the notebook and jobs in a private VPC subnet with no internet gateway, use interface VPC endpoints for SageMaker and a gateway VPC endpoint for S3, and attach a VPC endpoint policy that restricts S3 access to the specific approved bucket ARNs in the company account.

Answer

Keep the notebook in a public subnet, enable a NAT gateway for outbound traffic, and rely on an IAM role policy that grants access only to the approved S3 buckets.

Answer

Enable server-side encryption with KMS on all S3 buckets and use a security group that allows outbound HTTPS only, relying on TLS to keep traffic off the public internet.

Answer

Use SageMaker network isolation mode on the training jobs and store credentials in Secrets Manager so jobs authenticate to S3 over the internet using scoped tokens.