1 Answer
- Newest
- Most votes
- Most comments
0
Hello there,
When you create a domain with a KmsKeyId
specified [1]: AWS SageMaker uses the KMS key to encrypt the EFS volume attached to the domain.
As mentioned from AWS EFS documentation [2], after an EFS file system has been created, its encryption settings cannot be altered. As such you cannot change the KMS Key of an existing EFS file system.
References
[1] https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDomain.html [2] https://docs.aws.amazon.com/efs/latest/ug/encryption-at-rest.html
answered a year ago
Relevant content
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago