AWS sagemaker documentation change

Service: sagemaker · 2025-06-25 · Documentation low

File: sagemaker/latest/dg/security_iam_id-based-policy-examples.md

Summary

Added multiple JSON section markers and formatting elements throughout document

Security assessment

Formatting-only changes inserting JSON markers and horizontal rules. No modifications to existing security policy examples or guidance.

Diff

diff --git a/sagemaker/latest/dg/security_iam_id-based-policy-examples.md b/sagemaker/latest/dg/security_iam_id-based-policy-examples.md
index d57de83f3..2997005b6 100644
--- a//sagemaker/latest/dg/security_iam_id-based-policy-examples.md
+++ b//sagemaker/latest/dg/security_iam_id-based-policy-examples.md
@@ -81,0 +82,6 @@ To use the Amazon SageMaker AI console, you need to grant permissions for additi
+JSON
+    
+
+****
+    
+    
@@ -186,0 +194,6 @@ Grant these permissions with the following permissions policy:
+JSON
+    
+
+****
+    
+    
@@ -239,0 +254,6 @@ To use the Augmented AI console, you need to grant permissions for additional re
+JSON
+    
+
+****
+    
+    
@@ -707,0 +729,6 @@ When a directory is allowed, all of its subdirectories are also accessible by th
+JSON
+    
+
+****
+    
+    
@@ -752,0 +781,6 @@ To prevent a malicious algorithm using a user space client from accessing any fi
+JSON
+    
+
+****
+    
+    
@@ -798,0 +834,6 @@ The following policy enforces that a training job is created by a user calling [
+JSON
+    
+
+****
+    
+    
@@ -844,0 +887,6 @@ The following example uses the `sagemaker:WorkteamType` condition key with the `
+JSON
+    
+
+****
+    
+    
@@ -864,0 +914,6 @@ The following policies show how to restrict access to a public work team using t
+JSON
+    
+
+****
+    
+    
@@ -883,0 +939,7 @@ The following policies show how to restrict access to a public work team using t
+JSON
+    
+
+****
+    
+    
+    
@@ -913,0 +977,6 @@ The following policy restricts a user to specify a AWS KMS key to encrypt input
+JSON
+    
+
+****
+    
+    
@@ -941,0 +1012,6 @@ The following policy restricts a user to enable network isolation when creating
+JSON
+    
+
+****
+    
+    
@@ -966,0 +1044,6 @@ The following policy restricts a user to use a specific instance type when creat
+JSON
+    
+
+****
+    
+    
@@ -994,0 +1079,6 @@ The following policy requires a user to disable network access when creating ins
+JSON
+    
+
+****
+    
+    
@@ -1057,0 +1149,6 @@ This policy allows connections only to callers within a subnet where you created
+JSON
+    
+
+****
+    
+    
@@ -1080,0 +1179,6 @@ To restrict access to the API to only calls made using the interface endpoint, u
+JSON
+    
+
+****
+    
+    
@@ -1121,0 +1227,6 @@ For example, the following policy allows access to the [`CreateTrainingJob`](htt
+JSON
+    
+
+****
+    
+    
@@ -1159,0 +1272,6 @@ For example, the following policy allows access to a notebook instance only from
+JSON
+    
+
+****
+    
+    
@@ -1257,0 +1377,6 @@ The following procedure provides a simple example that helps you understand the
+JSON
+    
+
+****
+    
+    
@@ -1290,0 +1417,6 @@ For information about creating IAM policies and attaching them to identities, se
+JSON
+    
+
+****
+    
+