Wiz Adds Security Support for Amazon SageMaker
Summary
Wiz says its SageMaker support can flag publicly accessible notebooks, detect pre-signed notebook URLs, identify excessive permissions, and help customers assess data-leakage and data-poisoning risks.
Key points
- Wiz announced support for securing machine-learning models and SageMaker Notebooks.
- The product can identify notebook instances with public accessibility or disabled internet access, according to Wiz.
- Wiz Cloud Detection and Response can detect pre-signed URLs for SageMaker Notebooks that could enable unauthenticated access.
- Wiz says its Security Graph can show access paths involving excessive permissions and sensitive data.
- The announcement also describes help identifying potential data-poisoning risks in notebook datasets.
Article Details
- Event Type
- Wiz announced support for Amazon SageMaker, extending its cloud security monitoring and protection capabilities to SageMaker workloads and notebooks.
- Impact
- The integration is described as helping customers identify risks including publicly accessible notebooks, pre-signed notebook URLs, excessive permissions, potential data leakage, and data poisoning. The article describes potential security risks and capabilities, not a confirmed incident or realized impact.
People
Vendors
AmazonWiz is excited to announce support for Amazon SageMaker, enabling data scientists and machine learning engineers to accelerate their models into production faster and more securely. This support helps secure the MLWizWiz is excited to announce support for Amazon SageMaker, enabling data scientists and machine learning engineers to accelerate their models into production faster and more securely. This support helps secure the ML
Products
Amazon SageMakerWiz is excited to announce support for Amazon SageMaker, enabling data scientists and machine learning engineers to accelerate their models into production faster and more securely. This support helps secure the MLWiz Cloud Detection and Response (CDR)Wiz Cloud Detection and Response (CDR) can also detect pre-signed URLs for SageMaker Notebooks, which would enable malicious actors to potentially gain access without any authentication.Wiz Security GraphUsing the Wiz Security Graph, our attack path visualization shows how an external organization user could gain access to models based on sensitive data, which would result in data leakage.
Industries
Autonomous vehiclesapplications but also hinder their widespread adoption in high-stakes domains such as healthcare, autonomous vehicles, and finance. financehinder their widespread adoption in high-stakes domains such as healthcare, autonomous vehicles, and finance. Healthcaresecurity of AI applications but also hinder their widespread adoption in high-stakes domains such as healthcare, autonomous vehicles, and finance.