AI/ML / Mlde / Controls / DEV
Restrict Public IP Access on MLDE Instances
CCC.MLDE.CN07 · Networking
Prevent public IP access to MLDE instances to reduce exposure to the internet and enhance security.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.MLDE.CP01 | Managed Notebook Environments | Provides fully managed notebook instances specifically designed for machine learning development, eliminating the need to manage underlying infrastructure. |
| CCC.MLDE.CP07 | Data Pipeline Integration | Supports integration with data preparation and feature engineering pipelines, including versioning of datasets and capabilities used in ML experiments. |
| CCC.MLDE.CP08 | Model Registry | Provides centralized storage and versioning for trained models, including metadata about training runs, model artifacts, and deployment history. |
| CCC.VPC.CP04 | Public Subnet Creation | Ability to create a subnet that allows resources within the subnet to communicate with the public internet. |
Related Threats
| ID | Title | Description |
|---|
| CCC.MLDE.TH02 | Training Data or Model Artifacts are Exfiltrated | Notebook instances and connected data pipelines may be configured with unrestricted egress paths, such as file downloads, public network interfaces, or writable external destinations. Training datasets, model artifacts, and embedded credentials could be transferred out of the environment through these paths. This results in a loss of confidentiality for proprietary data and models, and may expose regulated or sensitive records used in training. |
| CCC.VPC.TH02 | Exposure of Resources to Public Internet | Assignment of external IP addresses to resources exposes resources to the public internet, increasing the risk of attacks such as brute force, exploitation of vulnerabilities, or unauthorized access. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.MLDE.CN07.AR01 | Verify that MLDE instances containing sensitive data cannot be accessed via public IP addresses. | tlp-red |
| CCC.MLDE.CN07.AR02 | For MLDE instances without sensitive data requiring public access, ensure that appropriate security controls are in place and access is approved. | tlp-red, tlp-amber, tlp-green, tlp-clear |