Passer au contenu
En utilisant AWS re:Post, vous acceptez les AWS re:Post Conditions d’utilisation
AWS re:Postre:Post
À propos de re:Post

How to reencrypt SageMaker domain with a new KMS key?

0

Hi, my current domain was created using a previous KMS key. Now I want to retire the key and use a new key. How should I proceed?

Sujets
Machine Learning et AIStockageSécurité, identité et conformité
Balises
Amazon SageMaker DeploymentAmazon SageMakerService AWS Key Management
Langue
English
demandé il y a 3 ans616 vues
1 réponse
0

Hello there,

When you create a domain with a KmsKeyId specified [1]: AWS SageMaker uses the KMS key to encrypt the EFS volume attached to the domain. As mentioned from AWS EFS documentation [2], after an EFS file system has been created, its encryption settings cannot be altered. As such you cannot change the KMS Key of an existing EFS file system.

References

[1] https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDomain.html [2] https://docs.aws.amazon.com/efs/latest/ug/encryption-at-rest.html

AWS
répondu il y a 3 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Contenus pertinents