The existing aws_sagemaker_endpoint_configuration resource currently does not support the VpcConfig or ExecutionRoleArn parameters in the CreateEndpointConfig API.
This means that we cannot adequately constrain created EndpointConfigs/Endpoints to run within specified VPCs (and with specified SecurityGroupIds), instead these (AFAIK) deploy to the account's default VPC. We also cannot specify an execution role ARN for these endpoints.
In order to ensure appropriate parity with AWS APIs, we would request that the resource be updated with support for these API parameters.
Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.
Volunteering to Work on This Issue
If you are interested in working on this issue, please leave a comment.
If this would be your first contribution, please review the contribution guide.
Description
The existing
aws_sagemaker_endpoint_configuration
resource currently does not support the VpcConfig or ExecutionRoleArn parameters in the CreateEndpointConfig API.This means that we cannot adequately constrain created EndpointConfigs/Endpoints to run within specified VPCs (and with specified SecurityGroupIds), instead these (AFAIK) deploy to the account's default VPC. We also cannot specify an execution role ARN for these endpoints.
In order to ensure appropriate parity with AWS APIs, we would request that the resource be updated with support for these API parameters.
Affected Resource(s) and/or Data Source(s)
Potential Terraform Configuration
References
https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpointConfig.html#sagemaker-CreateEndpointConfig-request-VpcConfig
https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpointConfig.html#sagemaker-CreateEndpointConfig-request-ExecutionRoleArn
Would you like to implement a fix?
None