lint of PreventNonVpcOnlySageMakerDomain

ach-mk · ach-mk · commit 58b4be188071 · 2025-03-10T18:12:50.000+01:00
diff --git a/service_control_policies/data_perimeter_governance_policy_2.json b/service_control_policies/data_perimeter_governance_policy_2.json
@@ -108,7 +108,8 @@
          ],
         "Resource": "*",
         "Condition": {
-            "StringNotEquals": {
+            "StringNotEqualsIfExists": {
+               "aws:PrincipalTag/dp:exclude": "true",
                "sagemaker:AppNetworkAccessType": "VpcOnly"
             }
          }

Original file line number	Diff line number	Diff line change
`@@ -108,7 +108,8 @@`
`108`	`108`	`],`
`109`	`109`	`"Resource": "*",`
`110`	`110`	`"Condition": {`
`111`		`- "StringNotEquals": {`
	`111`	`+ "StringNotEqualsIfExists": {`
	`112`	`+ "aws:PrincipalTag/dp:exclude": "true",`
`112`	`113`	`"sagemaker:AppNetworkAccessType": "VpcOnly"`
`113`	`114`	`}`
`114`	`115`	`}`