AWS – Announcing support for IAM Condition Keys and CMK for custom models for Amazon Comprehend

Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to analyze text documents and identify insights such as sentiment, entities, and topics in text. Today, we are announcing support for two security focused features: support for IAM condition keys and support for encrypting custom models with customer managed KMS keys. With AWS Identity and Access Management (IAM) condition keys, you can control the Amazon Virtual Private Cloud (VPC) and encryption settings for your Amazon Comprehend APIs. You can use the new condition keys in IAM policies when granting permissions to create asynchronous jobs and creating custom classification or custom entity training jobs in your organization. For example, As a security requirement, you can now enforce that all Comprehend asynchronous jobs must use VPC endpoints.Additionally, while Amazon Comprehend already supported Customer Managed Keys (CMK) for encrypting your training data and machine learning volumes used for inference, you can now encrypt your custom models in Amazon Comprehend using a Customer Managed Key (CMK).

Read More for the details.