Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add network isolation for training and processing jobs & Inter container encryption in sagemaker training and hyper parameter tuning job #133

Merged
merged 26 commits into from
Aug 7, 2024

Conversation

NSUDE-GEORGE
Copy link
Contributor

@NSUDE-GEORGE NSUDE-GEORGE commented Jun 19, 2024

Describe your changes

Issue ticket number and link

Checklist before requesting a review

  • I updated CHANGELOG.MD with a description of my changes
  • If the change was to a module, I ran the code validation script (scripts/validate.sh)
  • If the change was to a module, I have added thorough tests
  • If the change was to a module, I have added/updated the module's README.md
  • If a module was added, I added a reference to the module to the repository's README.md
  • I verified that my code deploys successfully using seedfarmer apply

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@malachi-constant

This comment was marked as outdated.

…encryption in sagemaker training job and hyper parameter tuning job
@malachi-constant

This comment was marked as outdated.

@malachi-constant

This comment was marked as outdated.

Comment on lines 229 to 230
SUBNET_IDS = json.loads(os.environ["SUBNET_IDS"]),
SECURITY_GROUP_IDS = json.loads(os.environ["SECURITY_GROUP_IDS"])
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. This isn't Python syntax :)
  2. SUBNET_IDS and SECURITY_GROUP_IDS aren't present in environment variables. You'll need to add these two variables as arguments to Product, and then pass them to BuildPipelineConstructs.

@malachi-constant

This comment was marked as outdated.

# Conflicts:
#	modules/sagemaker/sagemaker-templates-service-catalog/templates/xgboost_abalone/product_stack.py
@malachi-constant

This comment was marked as outdated.

@malachi-constant

This comment was marked as outdated.

@EthanBunce EthanBunce marked this pull request as draft August 2, 2024 14:57
@malachi-constant

This comment was marked as outdated.

@malachi-constant

This comment was marked as outdated.

@EthanBunce EthanBunce marked this pull request as ready for review August 6, 2024 16:46
@malachi-constant

This comment was marked as outdated.

@malachi-constant
Copy link
Contributor

AWS CodeBuild CI Report

  • CodeBuild project: AIOpsModuleTestsInfrastruct-doMLXEYsnmxr
  • Commit ID: d7edf09
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

Copy link
Contributor

@kukushking kukushking left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome! Thank you.

@kukushking kukushking merged commit 2818c2e into awslabs:main Aug 7, 2024
3 checks passed
@kukushking kukushking deleted the storage-kms branch August 7, 2024 09:50
mahesh-balumuri pushed a commit to mahesh-balumuri/mlops-modules that referenced this pull request Aug 25, 2024
…ner encryption in sagemaker training and hyper parameter tuning job (awslabs#133)

* add KMS encryption for storage

* adding encryption to ECR

* Encrypting each bucket with KMS MANAGED

* Network isolation for training and processing jobs &  Inter container encryption in sagemaker training job and hyper parameter tuning job

* Network isolation for training and processing jobs &  Inter container encryption in sagemaker training job and hyper parameter tuning job

* checkpoint

* Initial changes based on PR comments

* Re-arrange imports for validation script

* Convert lists to env vars correctly

* Create SG in module

* Resolve VPC in catalog stack instead of product stack

* Formatting

* Add permissions

* Do not enable network isolation on preprocess

* Updated changelog

---------

Co-authored-by: Srinivas Reddy <srinivasreddych@outlook.com>
Co-authored-by: Leon Luttenberger <LeonLuttenberger@users.noreply.github.com>
Co-authored-by: Anton Kukushkin <kukushkin.anton@gmail.com>
Co-authored-by: Ethan Bunce <ebunce@amazon.co.uk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants