AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-05-16 · Documentation low

File: AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-usersettings.md

Summary

Added AutoMountHomeEFS property to control EFS volume auto-mounting for user profiles in private spaces

Security assessment

The change introduces a configuration option for EFS mounting but doesn't address a specific security vulnerability. While controlling storage access has security implications, there's no evidence this change fixes a security issue or explicitly documents security controls.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-usersettings.md b/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-usersettings.md
index b85cd691c..c35af1912 100644
--- a//AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-usersettings.md
+++ b//AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-usersettings.md
@@ -18,0 +19 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+      "AutoMountHomeEFS" : String,
@@ -39,0 +41 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+      AutoMountHomeEFS: String
@@ -70,0 +73,15 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+`AutoMountHomeEFS`
+    
+
+Indicates whether auto-mounting of an EFS volume is supported for the user profile. The `DefaultAsDomain` value is only supported for user profiles. Do not use the `DefaultAsDomain` value when setting this parameter for a domain.
+
+SageMaker applies this setting only to private spaces that the user creates in the domain. SageMaker doesn't apply this setting to shared spaces.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `Enabled | Disabled | DefaultAsDomain`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+