Best practices for securing ML workloads
When securing an ML workload, you should take into consideration infrastructure and network security, authentication and authorization, encrypting data and model artifacts, logging and auditing, and meeting regulatory requirements. In this section, we will discuss best practices for security ML workloads using a combination of SageMaker and related AWS services.
Let's now look at best practices for securing ML workloads on AWS in the following sections.
Isolating the ML environment
To build secure ML workloads, you need an isolated compute and network environment. To achieve this for ML on SageMaker, deploy all resources such as notebooks, studio domain, training jobs, processing jobs, and endpoints within a Virtual Private Cloud (VPC). A VPC provides an isolated environment where all traffic between various SageMaker components flows within the network. You can add another layer of isolation by using security groups that include...