AWS sagemaker documentation change

Service: sagemaker · 2025-05-31 · Documentation medium

File: sagemaker/latest/dg/mlflow.md

Summary

Expanded CloudTrail logging to include 38 MLflow data plane API operations

Security assessment

While not fixing a specific vulnerability, expanded audit logging capabilities improve security monitoring and compliance by tracking critical MLflow operations like model versioning and experiment management.

Diff

diff --git a/sagemaker/latest/dg/mlflow.md b/sagemaker/latest/dg/mlflow.md
index 195383c15..87ccc34cd 100644
--- a//sagemaker/latest/dg/mlflow.md
+++ b//sagemaker/latest/dg/mlflow.md
@@ -121 +121 @@ The latest features, such as new UI elements and API functionality are in the mi
-AWS CloudTrail automatically logs activity related to your MLflow Tracking Server. The following API calls are logged in CloudTrail:
+AWS CloudTrail automatically logs activity related to your MLflow Tracking Server. The following control plane API calls are logged in CloudTrail:
@@ -141,0 +142,93 @@ AWS CloudTrail automatically logs activity related to your MLflow Tracking Serve
+AWS CloudTrail also automatically logs activity related to your MLflow data plane. The following data plane API calls are logged in CloudTrail. For event names, add the prefix `Mlflow` (for example, `MlflowCreateExperiment`).
+
+  * CreateExperiment
+
+  * CreateModelVersion
+
+  * CreateRegisteredModel
+
+  * CreateRun
+
+  * DeleteExperiment
+
+  * DeleteModelVersion
+
+  * DeleteModelVersionTag
+
+  * DeleteRegisteredModel
+
+  * DeleteRegisteredModelAlias
+
+  * DeleteRegisteredModelTag
+
+  * DeleteRun
+
+  * DeleteTag
+
+  * GetDownloadURIForModelVersionArtifacts
+
+  * GetExperiment
+
+  * GetExperimentByName
+
+  * GetLatestModelVersions
+
+  * GetMetricHistory
+
+  * GetModelVersion
+
+  * GetModelVersionByAlias
+
+  * GetRegisteredModel
+
+  * GetRun
+
+  * ListArtifacts
+
+  * LogBatch
+
+  * LogInputs
+
+  * LogMetric
+
+  * LogModel
+
+  * LogParam
+
+  * RenameRegisteredModel
+
+  * RestoreExperiment
+
+  * RestoreRun
+
+  * SearchExperiments
+
+  * SearchModelVersions
+
+  * SearchRegisteredModels
+
+  * SearchRuns
+
+  * SetExperimentTag
+
+  * SetModelVersionTag
+
+  * SetRegisteredModelAlias
+
+  * SetRegisteredModelTag
+
+  * SetTag
+
+  * TransitionModelVersionStage
+
+  * UpdateExperiment
+
+  * UpdateModelVersion
+
+  * UpdateRegisteredModel
+
+  * UpdateRun
+
+
+
+