AWS sagemaker-unified-studio medium security documentation change
Summary
Restructured documentation to focus on administrative capabilities, added details about user management, authentication methods, and integration with security services like IAM and AWS IAM Identity Center
Security assessment
The changes explicitly document authentication mechanisms (AWS IAM, IAM Identity Center, SAML) and data/AI governance capabilities. These are security controls for access management and resource governance. The removal of redundant access instructions and consolidation of security-related capabilities indicates an emphasis on secure configuration.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/what-is-sagemaker-unified-studio.md b/sagemaker-unified-studio/latest/adminguide/what-is-sagemaker-unified-studio.md index 7b35a865e..da7853834 100644 --- a//sagemaker-unified-studio/latest/adminguide/what-is-sagemaker-unified-studio.md +++ b//sagemaker-unified-studio/latest/adminguide/what-is-sagemaker-unified-studio.md @@ -5 +5 @@ -Accessing Amazon SageMaker Unified Studio +How does it work? @@ -9 +9 @@ Accessing Amazon SageMaker Unified Studio -Amazon SageMaker Unified Studio provides an integrated experience to use all your data and tools for analytics and AI. You can use Amazon SageMaker Unified Studio to discover your data and put it to work using familiar AWS analytics and machine learning services for model development, generative AI, big data processing, and SQL analytics, assisted by Amazon Q Developer. You can also use Amazon SageMaker Unified Studio to work across compute resources using unified notebooks, discover and query diverse data sources with a built-in SQL editor, train and deploy AI models at scale, and rapidly build custom generative AI applications. +As a part of the next generation of Amazon SageMaker, Amazon SageMaker Unified Studio is a unified development experience that brings together AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services. It provides a place to build, deploy, execute, and monitor workflows from a single interface. This helps drive collaboration across teams and facilitate agile development. @@ -11 +11 @@ Amazon SageMaker Unified Studio provides an integrated experience to use all you -Amazon SageMaker Unified Studio is built on Amazon DataZone capabilities such as **domains** to organize your assets and users, and **projects** to collaborate with others users, securely share artifacts, and seamlessly work across compute services. +In Amazon SageMaker Unified Studio, administrators manage the users and groups that can access Amazon SageMaker Unified Studio, and they set up resources for teams to use. When your administrator grants you access to Amazon SageMaker Unified Studio, you can contribute to Amazon SageMaker Unified Studio projects. Within Amazon SageMaker Unified Studio projects, you can collaborate on business use cases by creating and sharing data, computation work, and other resources. @@ -13 +13 @@ Amazon SageMaker Unified Studio is built on Amazon DataZone capabilities such as -Amazon SageMaker Unified Studio offers the following capabilities: +This guide provides information for Amazon SageMaker Unified Studio administrators on using the [Amazon SageMaker management console](https://console.aws.amazon.com/datazone) to set up resources in Amazon SageMaker Unified Studio and on managing users and groups and their access to Amazon SageMaker Unified Studio and its configured resources. @@ -15 +15 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Use all your data and tools in a single development environment +For more information about the user experience and flow of using projects to create and share data, perform computation work, and complete other tasks, see the [Amazon SageMaker Unified Studio User Guide](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/userguide/what-is-sagemaker-unified-studio.html). @@ -17 +17 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Build and scale generative AI applications with Amazon Bedrock +Administrators can also configure Amazon SageMaker Unified Studio programmatically by invoking the [HTTPS APIs](https://docs.aws.amazon.com/datazone/latest/APIReference/Welcome.html). @@ -19 +19 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Gain insights with the most price-performant SQL engine from Amazon Redshift +## How does it work? @@ -21 +21 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Unify data access across Amazon S3 data lakes, Amazon Redshift, and federated data sources with Amazon SageMaker Lakehouse +Amazon SageMaker Unified Studio administrators can use the [Amazon SageMaker management console](https://console.aws.amazon.com/datazone) to configure and customize the following Amazon SageMaker Unified Studio capabilities: @@ -23 +23 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Build, train, and deploy machine learning and foundation models, with fully managed infrastructure, tools, and workflows from Amazon SageMaker AI + * Data analytics, machine learning, SQL, and generative AI @@ -25 +25 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Prepare, integrate, and orchestrate data for analytics and AI at petabyte scale with Amazon EMR, Amazon Athena, and AWS Glue + * Data and AI governance @@ -27 +27 @@ Amazon SageMaker Unified Studio offers the following capabilities: - * Discover, govern, and collaborate on data and AI securely, with a unified catalog, built on Amazon DataZone + * Generative AI app development using Amazon Bedrock serverless models @@ -28,0 +29 @@ Amazon SageMaker Unified Studio offers the following capabilities: + * Amazon Q @@ -30,17 +31 @@ Amazon SageMaker Unified Studio offers the following capabilities: - - -## Accessing Amazon SageMaker Unified Studio - -You can access Amazon SageMaker Unified Studio in any of the following ways: - - * Amazon SageMaker management console - -You can use the Amazon SageMaker management console at [https://console.aws.amazon.com/datazone](https://console.aws.amazon.com/datazone) (Amazon SageMaker Unified Studio is built on Amazon DataZone capabilities) to access and configure your domains for user management, account associations with your Amazon SageMaker unified domains (so that resources can be created and accessed in these accounts for various purposes), project profiles, blueprints, Amazon Bedrock models, Git connections, and Amazon Q usage. - - * Amazon SageMaker Unified Studio - -Amazon SageMaker Unified Studio is a browser-based web application where you can use all your data and tools for analytics and AI. Amazon SageMaker Unified Studio can authenticate you with your IAM credentials or with credentials from your identity provider through the AWS IAM Identity Center or with your SAML credentials. You can obtain the Amazon SageMaker Unified Studio URL for you domains by accessing the Amazon SageMaker management console at [https://console.aws.amazon.com/datazone](https://console.aws.amazon.com/datazone). - - * Amazon DataZone HTTPS API - -You can access Amazon SageMaker Unified Studio programmatically by using the Amazon DataZone HTTPS API, which enable you to issue HTTPS requests directly to the service. For more information, see the [Amazon DataZone API Reference](https://docs.aws.amazon.com/datazone/latest/APIReference/Welcome.html). + * Authentication via AWS IAM, AWS IAM Identity Center, or SAML