AWS Security ChangesHomeSearch

AWS sagemaker documentation change

Service: sagemaker · 2025-06-25 · Documentation low

File: sagemaker/latest/dg/sagemaker-roles.md

Summary

Added multiple JSON section placeholders with horizontal rules throughout IAM policy documentation

Security assessment

Structural formatting additions without changing actual policy content or security guidance

Diff

diff --git a/sagemaker/latest/dg/sagemaker-roles.md b/sagemaker/latest/dg/sagemaker-roles.md
index 37688c122..b08d7ddaf 100644
--- a//sagemaker/latest/dg/sagemaker-roles.md
+++ b//sagemaker/latest/dg/sagemaker-roles.md
@@ -111,0 +112,6 @@ To give an execution role permissions to access one or more specific buckets in
+JSON
+    
+
+****
+    
+    
@@ -411,0 +419,6 @@ You attach the following trust policy to the IAM role which grants SageMaker AI
+JSON
+    
+
+****
+    
+    
@@ -464,0 +479,6 @@ For an execution role that you can pass in a `CreateAutoMLJob` or `CreateAutoMLJ
+JSON
+    
+
+****
+    
+    
@@ -566,0 +588,6 @@ For an execution role that you can pass in the `CreateDomain` API request, you c
+JSON
+    
+
+****
+    
+    
@@ -583,0 +612,6 @@ Alternatively, if the permissions are specified in a KMS policy, you can attach
+JSON
+    
+
+****
+    
+    
@@ -608,0 +644,6 @@ For an execution role that you can pass in a `CreateImage` or `UpdateImage` API
+JSON
+    
+
+****
+    
+    
@@ -627,0 +670,6 @@ The permissions that you grant to the execution role for calling the `CreateNote
+JSON
+    
+
+****
+    
+    
@@ -704,0 +754,6 @@ To tighten the permissions, limit them to specific Amazon S3 and Amazon ECR reso
+JSON
+    
+
+****
+    
+    
@@ -808,0 +865,6 @@ For an execution role that you can pass in a `CreateHyperParameterTuningJob` API
+JSON
+    
+
+****
+    
+    
@@ -835,0 +899,6 @@ Instead of the specifying `"Resource": "*"`, you could scope these permissions t
+JSON
+    
+
+****
+    
+    
@@ -963,0 +1034,6 @@ For an execution role that you can pass in a `CreateProcessingJob` API request,
+JSON
+    
+
+****
+    
+    
@@ -990,0 +1068,6 @@ Instead of the specifying `"Resource": "*"`, you could scope these permissions t
+JSON
+    
+
+****
+    
+    
@@ -1105,0 +1190,6 @@ For an execution role that you can pass in a `CreateTrainingJob` API request, yo
+JSON
+    
+
+****
+    
+    
@@ -1132,0 +1224,6 @@ Instead of the specifying `"Resource": "*"`, you could scope these permissions t
+JSON
+    
+
+****
+    
+    
@@ -1252,0 +1351,6 @@ For an execution role that you can pass in a `CreateModel` API request, you can
+JSON
+    
+
+****
+    
+    
@@ -1278,0 +1384,6 @@ Instead of the specifying `"Resource": "*"`, you can scope these permissions to
+JSON
+    
+
+****
+    
+