Checks Performed
- Amazon SageMaker Notebook Instance Should Be In VPC
- AWS Account Should Not Have Any Unused DynamoDB Tables
- AWS DynamoDB Tables Should Use KMS CMKs for Encryption
- DynamoDB Accelerator (DAX) Cluster Should Be Encrypted
- DynamoDB Tables Should Have Autoscaling Enabled
- DynamoDB Tables Should Have Continuous Backup Enabled
- Enable Firehose Delivery Stream Should Use Server-Side Encryption
- Firehose Delivery Stream Destination Should Have Encryption
- Kinesis Server Side Encryption Should Be Enabled
- Kinesis Stream Shard Level Metrics
- Kinesis Stream Should Be Encrypted With CMK
- Notebook Data Should Be Encrypted
- Notebook Data Should Be Encrypted With KMS Customer Master Keys
- Notebook Direct Internet Access Should Be Avoided
- Sagemaker Endpoint Should Have KMS Key Configured
- Sagemaker Notebook Instance Should Have KMS Key Configured
- Sagemaker Notebook Instance Should Not Have Root Access Enabled
- VPC Endpoint Should Be Enabled For DynamoDB