aws-sagemaker-job-log-event

User containers can log environment variables, sample records, model inputs, and errors containing sensitive data.

awscritical service: aws:sagemaker emits ContainsCredential

Where it sits

locationCloudWatch Logs SageMaker training/processing/inference log event.message
location kindlog_field
data kindscredential password api_key customer_data pii source_code_secret
emits edgeContainsCredential
serviceSageMaker (aws:sagemaker)

Collection recipe

access modeindirect_destination
operationlogs:FilterLogEvents
response pathEvents[].Message
encodingstring
params{"LogGroupName": "\u003csagemaker-log-group\u003e"}

Required permissions

logs:FilterLogEvents

References

move · open · esc close