Amazon SageMaker

1. 01A SageMaker notebook has direct internet access. Data loaded into it can be sent anywhere; disable direct internet access and route through a VPC with egress controls.

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. cloudtrail_activity · Sep 13, 2026
   AWS (demo) (123456789012): Amazon SageMaker, 13 CloudTrail events by 3 identities, 9 write, 2 resources in 90 days across us-east-1
   Detail

   {
     "services": [
       "sagemaker.amazonaws.com"
     ],
     "topActions": [
       {
         "name": "StartNotebookInstance",
         "count": 6
       },
       {
         "name": "DescribeEndpoint",
         "count": 4
       },
       {
         "name": "CreateNotebookInstance",
         "count": 1
       },
       {
         "name": "CreateEndpoint",
         "count": 1
       },
       {
         "name": "CreateTrainingJob",
         "count": 1
       }
     ],
     "invocationLogging": null
   }

2. sagemaker:endpoint
   endpoint 'churn-model-prod' in us-east-1
   Detail

   {
     "arn": "arn:aws:sagemaker:us-east-1:123456789012:endpoint/churn-model-prod",
     "status": "InService"
   }

3. sagemaker:notebook
   notebook 'dave-experiments' in us-east-1
   Detail

   {
     "arn": "arn:aws:sagemaker:us-east-1:123456789012:notebook-instance/dave-experiments",
     "status": "InService",
     "instanceType": "ml.t3.large",
     "directInternetAccess": true
   }