Is it safe to store the secrets in the SageMaker studio Jupyter App instance ?

Question

Is it safe to store some of the secrets (ex: SSH keys, external application creds) in SageMaker studio Jupyter App instance ? Of course Secrets Manager is the recommended way of storing the secrets but if we ensure that this SageMaker user profile (and hence the Jupyter App) is not accessible by any user other than me, by configuring the necessary permissions, is it fine to store the secrets there ? 
Thank you.

Answer

Hi,

The best security practices recommend to not store anything  confidential like keys, passwords, etc. in code.

I would suggest you to use AWS Secrets Manager from your Sagemaker code (probably Pyhton?). The Python AWS SDK makes it easy for you to use Secrets Manager from Python code.

You have an example here: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets_cache-python.html

Best,

Didier

Is it safe to store the secrets in the SageMaker studio Jupyter App instance ?

Relevant content