AWS Security ChangesHomeSearch

AWS sagemaker documentation change

Service: sagemaker · 2025-04-18 · Documentation low

File: sagemaker/latest/dg/sagemaker-hyperpod-prerequisites.md

Summary

Added CIDR block sizing guidance for network planning

Security assessment

Focuses on operational network planning rather than security controls

Diff

diff --git a/sagemaker/latest/dg/sagemaker-hyperpod-prerequisites.md b/sagemaker/latest/dg/sagemaker-hyperpod-prerequisites.md
index d3ca9c9a5..c7dfe25e3 100644
--- a//sagemaker/latest/dg/sagemaker-hyperpod-prerequisites.md
+++ b//sagemaker/latest/dg/sagemaker-hyperpod-prerequisites.md
@@ -119,0 +120,10 @@ SageMaker HyperPod supports multi-Availability Zone deployment. For more informa
+  * Consider your subnet's Classless Inter-Domain Routing (CIDR) block size carefully before creating HyperPod clusters.
+
+    * The subnet CIDR block size cannot be changed after creation. This is especially important when you use large accelerated instances like P5. Without sufficient block size, you must recreate your clusters when scaling up.
+
+    * When choosing the appropriate subnet CIDR block size, consider these factors: your instance types, expected number of instances, and the number of IP addresses consumed by each instance.
+
+    * For Slurm-orchestrated clusters, each P5 instance can create 32 IP addresses (one per network card). For EKS-orchestrated clusters, each P5 instance can create 81 IP addresses (50 from the primary card plus one from each of the remaining 31 cards). For detailed specifications, see [Network specifications ](https://docs.aws.amazon.com/ec2/latest/instancetypes/ac.html#ac_network) from _Amazon EC2 Instance Types Developer Guide_.
+
+    * For examples of CloudFormation templates that specify the subnet CIDR block size, see the [HyperPod Slurm template](https://github.com/aws-samples/awsome-distributed-training/blob/main/1.architectures/5.sagemaker-hyperpod/sagemaker-hyperpod.yaml) and [HyperPod Amazon EKS template](https://github.com/aws-samples/awsome-distributed-training/blob/main/1.architectures/7.sagemaker-hyperpod-eks/cfn-templates/nested-stacks/private-subnet-stack.yaml) in the [awsome-distributed-training repository](https://github.com/aws-samples/awsome-distributed-training/tree/main).
+