AWS sagemaker-unified-studio documentation change
Summary
Added permission mode selection (fine-grained vs compatibility) for EMR Serverless compute resources
Security assessment
Documents access control modes for data security (fine-grained access vs full-table access) but does not address a specific security issue. Enhances documentation about security configuration options.
Diff
diff --git a/sagemaker-unified-studio/latest/userguide/adding-new-emr-serverless.md b/sagemaker-unified-studio/latest/userguide/adding-new-emr-serverless.md index a25fc6d52..a6f0fa1aa 100644 --- a/sagemaker-unified-studio/latest/userguide/adding-new-emr-serverless.md +++ b/sagemaker-unified-studio/latest/userguide/adding-new-emr-serverless.md @@ -21 +21,7 @@ After your admin has enabled blueprints: - 6. After configuring these settings, select **Add compute**. After a short time, your serverless application running EMR Serverless should be added to your project. + 6. Choose the permission mode option that supports the data you will be using with the compute resource. + + * Select **project.spark.fineGrained** for data managed using fine-grained access, meaning the compute engine can only access specific rows and columns from the full dataset. Choosing this option configures your compute to work with data asset subscriptions from Amazon SageMaker catalog. + + * Select **project.spark.compatibility** to configure permission mode to be compatible with data managed using full-table access, meaning the compute engine can access all rows and columns in the data. Choosing this option configures your compute to work with data assets from AWS and from external systems that you connect to from your project. + + 7. After configuring these settings, select **Add compute**. After a short time, your serverless application running EMR Serverless should be added to your project. @@ -34 +40 @@ EMR Serverless -Deleting applications +Configuring permission mode