sagemaker: Support network isolation for models

[petermeansrock]

Describe the feature

As described in the SageMaker Endpoint L2 construct RFC:

Network Isolation: The EnableNetworkIsolation Cloudformation boolean flag (defaults to false) on a model resource prevents inbound and outbound network calls to/from the model container.

Please 👍 this issue to help with the prioritization of this feature.

Use Case

"EnableNetworkIsolation – Set this to true when creating training, hyperparameter tuning, and inference jobs to prevent situations like malicious code being accidentally installed and transferring data to a remote host." (link)

Proposed Solution

As described in the SageMaker Endpoint L2 construct RFC:

Incorporating such an attribute into the Model L2 construct should not conflict with any proposed API.

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.54.0-alpha.0

Environment details (OS name and version, etc.)

macOS Ventura