| machine learning engineers, mlops automation, or platform teams may legitimately import custom models or stand up marketplace model endpoints as part of normal model lifecycle operations. verify whether the user identity, user agent, source ip, and model artifact source (s3 location) are expected for your environment. imports performed by approved ci/cd or iac pipelines can be exempted from this rule. activity from unfamiliar identities or untrusted artifact sources should be investigated. | |
LoFP
/
t1525