AWS step-functions documentation change
Summary
Standardized ARN patterns across examples (region/account-id format), updated state machine syntax ('Parameters' to 'Arguments'), simplified condition expressions, and fixed role ARN placeholders.
Security assessment
Changes focus on documentation consistency and example accuracy. No security vulnerabilities addressed or security features added - updates to IAM role ARNs follow existing patterns without introducing new security controls.
Diff
diff --git a/step-functions/latest/dg/connect-sagemaker.md b/step-functions/latest/dg/connect-sagemaker.md index 796fb16e0..bc167dcb6 100644 --- a//step-functions/latest/dg/connect-sagemaker.md +++ b//step-functions/latest/dg/connect-sagemaker.md @@ -17 +17 @@ To learn about integrating with AWS services in Step Functions, see [Integrating - * There are no optimizations for the [Request Response](./connect-to-resource.html#connect-default) integration pattern. + * There are no specific optimizations for the [Request Response](./connect-to-resource.html#connect-default) integration pattern. @@ -236 +236 @@ The following includes a `Task` state that creates an Amazon SageMaker AI transf - "Parameters": { + "Arguments": { @@ -269 +269 @@ The following includes a `Task` state that creates an Amazon SageMaker AI traini - "Parameters":{ + "Arguments":{ @@ -297 +297 @@ The following includes a `Task` state that creates an Amazon SageMaker AI traini - "RoleArn":"arn:aws:iam::123456789012:role/docsearch-stepfunction-iam-role", + "RoleArn":"arn:aws:iam::account-id:role/docsearch-stepfunction-iam-role", @@ -342 +341,0 @@ The following includes a `Task` state that creates an Amazon SageMaker AI traini - "ResultPath":"$.cause", @@ -365 +364 @@ The following includes a `Task` state that creates an Amazon SageMaker AI labeli - "Parameters": { + "Arguments": { @@ -368 +367 @@ The following includes a `Task` state that creates an Amazon SageMaker AI labeli - "AnnotationConsolidationLambdaArn": "arn:aws:lambda:us-west-2:123456789012:function:ACS-TextMultiClass" + "AnnotationConsolidationLambdaArn": "arn:aws:lambda:region:123456789012:function:ACS-TextMultiClass" @@ -371 +370 @@ The following includes a `Task` state that creates an Amazon SageMaker AI labeli - "PreHumanTaskLambdaArn": "arn:aws:lambda:us-west-2:123456789012:function:PRE-TextMultiClass", + "PreHumanTaskLambdaArn": "arn:aws:lambda:region:123456789012:function:PRE-TextMultiClass", @@ -382 +381 @@ The following includes a `Task` state that creates an Amazon SageMaker AI labeli - "WorkteamArn": "arn:aws:sagemaker:us-west-2:123456789012:workteam/private-crowd/ExampleTesting" + "WorkteamArn": "arn:aws:sagemaker:region:123456789012:workteam/private-crowd/ExampleTesting" @@ -415,5 +414,2 @@ The following includes a `Task` state that creates an Amazon SageMaker AI labeli - "Not": { - "Variable": "$.LabelingJobArn", - "StringEquals": "" - }, - "Next": "Succeed" + "Next": "Success", + "Condition": "{% $states.input.LabelingJobArn != '' %}" @@ -424 +420 @@ The following includes a `Task` state that creates an Amazon SageMaker AI labeli - "Succeed": { + "Success": { @@ -448 +444 @@ The following includes a `Task` state that creates an Amazon SageMaker AI proces - "Parameters": { + "Arguments": { @@ -459 +455 @@ The following includes a `Task` state that creates an Amazon SageMaker AI proces - "RoleArn": "arn:aws:iam::123456789012:role/SM-003-CreateProcessingJobAPIExecutionRole", + "RoleArn": "arn:aws:iam::account-id:role/SM-003-CreateProcessingJobAPIExecutionRole", @@ -495 +491 @@ The following example templates show how AWS Step Functions generates IAM polici -For these examples, ``[[roleArn]]`` refers to the Amazon Resource Name (ARN) of the IAM role that SageMaker AI uses to access model artifacts and docker images for deployment on ML compute instances, or for batch transform jobs. For more information, see [Amazon SageMaker Roles](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-roles.html). +For these examples, ``roleArn`` refers to the Amazon Resource Name (ARN) of the IAM role that SageMaker AI uses to access model artifacts and docker images for deployment on ML compute instances, or for batch transform jobs. For more information, see [Amazon SageMaker Roles](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-roles.html). @@ -516 +512 @@ Run a Job (.sync) - "arn:aws:sagemaker:[[region]]:[[accountId]]:training-job/[[trainingJobName]]*" + "arn:aws:sagemaker:region:account-id:training-job/jobName*" @@ -534 +530 @@ Run a Job (.sync) - "[[roleArn]]" + "roleArn" @@ -550 +546 @@ Run a Job (.sync) - "arn:aws:events:[[region]]:[[accountId]]:rule/StepFunctionsGetEventsForSageMakerTrainingJobsRule" + "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForSageMakerTrainingJobsRule" @@ -570 +566 @@ Request Response and Callback (.waitForTaskToken) - "arn:aws:sagemaker:[[region]]:[[accountId]]:training-job/[[trainingJobName]]*" + "arn:aws:sagemaker:region:account-id:training-job/jobName*" @@ -588 +584 @@ Request Response and Callback (.waitForTaskToken) - "[[roleArn]]" + "roleArn" @@ -617 +613 @@ _Dynamic resources_ - "arn:aws:sagemaker:[[region]]:[[accountId]]:training-job/*" + "arn:aws:sagemaker:region:account-id:training-job/*" @@ -635 +631 @@ _Dynamic resources_ - "[[roleArn]]" + "roleArn" @@ -651 +647 @@ _Dynamic resources_ - "arn:aws:events:[[region]]:[[accountId]]:rule/StepFunctionsGetEventsForSageMakerTrainingJobsRule" + "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForSageMakerTrainingJobsRule" @@ -670 +666 @@ Request Response and Callback (.waitForTaskToken) - "arn:aws:sagemaker:[[region]]:[[accountId]]:training-job/*" + "arn:aws:sagemaker:region:account-id:training-job/*" @@ -688 +684 @@ Request Response and Callback (.waitForTaskToken) - "[[roleArn]]" + "roleArn" @@ -722 +718 @@ Run a Job (.sync) - "arn:aws:sagemaker:[[region]]:[[accountId]]:transform-job/[[transformJobName]]*" + "arn:aws:sagemaker:region:account-id:transform-job/jobName*" @@ -740 +736 @@ Run a Job (.sync) - "[[roleArn]]" + "roleArn" @@ -756 +752 @@ Run a Job (.sync) - "arn:aws:events:[[region]]:[[accountId]]:rule/StepFunctionsGetEventsForSageMakerTransformJobsRule" + "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForSageMakerTransformJobsRule" @@ -776 +772 @@ Request Response and Callback (.waitForTaskToken) - "arn:aws:sagemaker:[[region]]:[[accountId]]:transform-job/[[transformJobName]]*" + "arn:aws:sagemaker:region:account-id:transform-job/jobName*" @@ -794 +790 @@ Request Response and Callback (.waitForTaskToken) - "[[roleArn]]" + "roleArn" @@ -823 +819 @@ Run a Job (.sync) - "arn:aws:sagemaker:[[region]]:[[accountId]]:transform-job/*" + "arn:aws:sagemaker:region:account-id:transform-job/*" @@ -841 +837 @@ Run a Job (.sync) - "[[roleArn]]" + "roleArn" @@ -857 +853 @@ Run a Job (.sync) - "arn:aws:events:[[region]]:[[accountId]]:rule/StepFunctionsGetEventsForSageMakerTransformJobsRule" + "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForSageMakerTransformJobsRule" @@ -877 +873 @@ Request Response and Callback (.waitForTaskToken) - "arn:aws:sagemaker:[[region]]:[[accountId]]:transform-job/*" + "arn:aws:sagemaker:region:account-id:transform-job/*" @@ -895 +891 @@ Request Response and Callback (.waitForTaskToken) - "[[roleArn]]" + "roleArn"