AWS sagemaker-unified-studio medium security documentation change

Service: sagemaker-unified-studio · 2025-05-01 · Security-related medium

File: sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioProjectUserRolePolicy.md

Summary

Added new IAM policy statements for Bedrock Data Automation integration, Trusted Identity Propagation with sts:SetContext, and enhanced Bedrock agent permissions with principal tag conditions. Removed redundant policy references.

Security assessment

Added conditional permissions (aws:PrincipalTag and bedrock:InlineAgentName) enforce project isolation and role-based access control. The sts:SetContext permission with sqlworkbench.amazonaws.com condition enables trusted identity propagation, a security feature. These changes implement security controls but do not explicitly reference a specific vulnerability.

Diff

diff --git a/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioProjectUserRolePolicy.md b/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioProjectUserRolePolicy.md
index 615431388..32ced8295 100644
--- a//sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioProjectUserRolePolicy.md
+++ b//sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioProjectUserRolePolicy.md
@@ -1213,0 +1214,17 @@ An administrator can disable certain permissions in this policy by tagging the r
+    		{
+    			"Sid": "SetContextForTrustedIdentityPropagation",
+    			"Effect": "Allow",
+    			"Action": [
+    				"sts:SetContext"
+    			],
+    			"Resource": [
+    				"arn:aws:sts::*:self"
+    			],
+    			"Condition": {
+    				"ForAnyValue:StringEquals": {
+    					"aws:CalledVia": [
+    						"sqlworkbench.amazonaws.com"
+    					]
+    				}
+    			}
+    		},
@@ -1836,0 +1854,3 @@ An administrator can disable certain permissions in this policy by tagging the r
+    				"bedrock:CreateBlueprint",
+    				"bedrock:CreateBlueprintVersion",
+    				"bedrock:CreateDataAutomationProject",
@@ -1841,0 +1862,2 @@ An administrator can disable certain permissions in this policy by tagging the r
+    				"bedrock:DeleteBlueprint",
+    				"bedrock:DeleteDataAutomationProject",
@@ -1844,0 +1867,3 @@ An administrator can disable certain permissions in this policy by tagging the r
+    				"bedrock:GetBlueprint",
+    				"bedrock:GetDataAutomationProject",
+    				"bedrock:GetDataAutomationStatus",
@@ -1848,0 +1874 @@ An administrator can disable certain permissions in this policy by tagging the r
+    				"bedrock:InvokeDataAutomationAsync",
@@ -1858 +1884,5 @@ An administrator can disable certain permissions in this policy by tagging the r
-    				"bedrock:UpdateAgentAlias"
+    				"bedrock:UpdateAgentAlias",
+    				"bedrock:UpdateBlueprint",
+    				"bedrock:UpdateDataAutomationProject",
+    				"bedrock:ListAgentActionGroups",
+    				"bedrock:ListAgentKnowledgeBases"
@@ -1890,0 +1921,15 @@ An administrator can disable certain permissions in this policy by tagging the r
+    		{
+    			"Sid": "InvokeDataAutomationAsyncPermissions",
+    			"Effect": "Allow",
+    			"Action": [
+    				"bedrock:InvokeDataAutomationAsync"
+    			],
+    			"Resource": [
+    				"arn:aws:bedrock:*:*:data-automation-profile/*"
+    			],
+    			"Condition": {
+    				"StringEquals": {
+    					"aws:PrincipalTag/EnableAmazonBedrockPermissions": "true"
+    				}
+    			}
+    		},
@@ -1898 +1943,20 @@ An administrator can disable certain permissions in this policy by tagging the r
-    					"aws:PrincipalTag/EnableAmazonBedrockIDEPermissions": "true"
+    					"aws:PrincipalTag/EnableAmazonBedrockIDEPermissions": "true",
+    					"bedrock:InlineAgentName": "${datazone:userId}"
+    				},
+    				"StringNotEquals": {
+    					"bedrock:InlineAgentName": ""
+    				}
+    			}
+    		},
+    		{
+    			"Sid": "BedrockInvokeInlineAgentPermissions",
+    			"Effect": "Allow",
+    			"Action": "bedrock:InvokeInlineAgent",
+    			"Resource": "*",
+    			"Condition": {
+    				"StringEquals": {
+    					"aws:PrincipalTag/EnableAmazonBedrockPermissions": "true",
+    					"bedrock:InlineAgentName": "${datazone:userId}"
+    				},
+    				"StringNotEquals": {
+    					"bedrock:InlineAgentName": ""
@@ -1928 +1991,0 @@ An administrator can disable certain permissions in this policy by tagging the r
-    				"bedrock:InvokeInlineAgent",
@@ -2532,2 +2594,0 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-SageMakerStudioDomainServiceRolePolicy
-
@@ -2535,0 +2597,2 @@ AmazonDataZoneBedrockModelManagementPolicy
+AmazonDataZoneBedrockModelConsumptionPolicy
+