AWS SageMaker Integration#

Connecting to the Feature Store from SageMaker requires setting up a Feature Store API key for SageMaker and installing the HSFS on SageMaker. This guide explains step by step how to connect to the Feature Store from SageMaker.

Generate an API key#

For instructions on how to generate an API key follow this user guide. For the SageMaker integration to work make sure you add the following scopes to your API key:

1. featurestore
2. project
3. job
4. kafka

Quickstart API key Argument#

    import hsfs
    conn = hsfs.connection(
        host='my_instance',                 # DNS of your Feature Store instance
        port=443,                           # Port to reach your Hopsworks instance, defaults to 443
        project='my_project',               # Name of your Hopsworks Feature Store project
        api_key_value='apikey',             # The API key to authenticate with Hopsworks
        hostname_verification=True          # Disable for self-signed certificates
    )
    fs = conn.get_feature_store()           # Get the project's default feature store

Store the API key on AWS#

The API key now needs to be stored on AWS, so it can be retrieved from within SageMaker notebooks.

Identify your SageMaker role#

You need to know the IAM role used by your SageMaker instance to set up the API key for it. You can find it in the overview of your SageMaker notebook instance of the AWS Management Console.

In this example, the name of the role is AmazonSageMaker-ExecutionRole-20190511T072435.

Store the API key#

You have two options to make your API key accessible from SageMaker:

Option 1: Using the AWS Systems Manager Parameter Store#

Store the API key in the AWS Systems Manager Parameter Store#

1. In the AWS Management Console, ensure that your active region is the region you use for SageMaker.
2. Go to the AWS Systems Manager choose Parameter Store in the left navigation bar and select Create Parameter.
3. As name, enter /hopsworks/role/[MY_SAGEMAKER_ROLE]/type/api-key replacing [MY_SAGEMAKER_ROLE] with the AWS role used by the SageMaker instance that should access the Feature Store.
4. Select Secure String as type and create the parameter.

Grant access to the Parameter Store from the SageMaker notebook role#

1. In the AWS Management Console, go to IAM, select Roles and then the role that is used when creating SageMaker notebook instances.
2. Select Add inline policy.
3. Choose Systems Manager as service, expand the Read access level and check GetParameter.
4. Expand Resources and select Add ARN.
5. Enter the region of the Systems Manager as well as the name of the parameter WITHOUT the leading slash e.g. hopsworks/role/[MY_SAGEMAKER_ROLE]/type/api-key and click Add.
6. Click on Review, give the policy a name und click on Create policy.

Option 2: Using the AWS Secrets Manager#

Store the API key in the AWS Secrets Manager#

1. In the AWS Management Console, ensure that your active region is the region you use for SageMaker.
2. Go to the AWS Secrets Manager and select Store new secret.
3. Select Other type of secrets and add api-key as the key and paste the API key created in the previous step as the value.
4. Click next.

1. As secret name, enter hopsworks/role/[MY_SAGEMAKER_ROLE] replacing [MY_SAGEMAKER_ROLE] with the AWS role used by the SageMaker instance that should access the Feature Store.
2. Select next twice and finally store the secret.
3. Then click on the secret in the secrets list and take note of the Secret ARN.

Grant access to the SecretsManager to the SageMaker notebook role#

1. In the AWS Management Console, go to IAM, select Roles and then the role that is used when creating SageMaker notebook instances.
2. Select Add inline policy.
3. Choose Secrets Manager as service, expand the Read access level and check GetSecretValue.
4. Expand Resources and select Add ARN.
5. Paste the ARN of the secret created in the previous step.
6. Click on Review, give the policy a name und click on Create policy.

Install HSFS#

To be able to access the Hopsworks Feature Store, the HSFS Python library needs to be installed. One way of achieving this is by opening a Python notebook in SageMaker and installing the HSFS with a magic command and pip:

!pip install hsfs[python]~=[HOPSWORKS_VERSION]

Note that the library will not be persistent. For information around how to permanently install a library to SageMaker, see Install External Libraries and Kernels in Notebook Instances.

Connect to the Feature Store#

You are now ready to connect to the Hopsworks Feature Store from SageMaker:

import hsfs
conn = hsfs.connection(
    'my_instance',                      # DNS of your Feature Store instance
    443,                                # Port to reach your Hopsworks instance, defaults to 443
    'my_project',                       # Name of your Hopsworks Feature Store project
    secrets_store='secretsmanager',     # Either parameterstore or secretsmanager
    hostname_verification=True,         # Disable for self-signed certificates
    engine='python'                     # Choose Python as engine if you haven't set up AWS EMR
)
fs = conn.get_feature_store()           # Get the project's default feature store

Next Steps#

For more information about how to use the Feature Store, see the Quickstart Guide.