AWS Key Management Service Encryption is now available in Amazon SageMaker in Hosting and Training

Amazon SageMaker storage volumes can be encrypted for Training and Hosting with Amazon Web Service KMS. Amazon Web Service Key Management System provisions centralized control over the encryptions keys utilized to secure the data. The Encryption keys can be created, deleted, rotate, audit, import, disable and define the usage policies for the encryption keys utilized to encrypt the data. You have to specify the Key Management Service Key ID when you build Amazon SageMaker Notebook instances, endpoints or training jobs. With the specified key, the attached ML storage volumes are encrypted.