AWS sagemaker high security documentation change
Summary
Added new AWS managed policy for HyperPod observability and updated release notes with security fixes
Security assessment
Explicit mention of 'Nvidia toolkit security fixes' indicates addressing vulnerabilities. New observability policy enhances security controls.
Diff
diff --git a/sagemaker/latest/dg/doc-history.md b/sagemaker/latest/dg/doc-history.md index a55697f40..9dab1b813 100644 --- a//sagemaker/latest/dg/doc-history.md +++ b//sagemaker/latest/dg/doc-history.md @@ -10,0 +11,5 @@ Change| Description| Date +AWS managed policy updates - New policy| SageMaker AI added the following new AWS managed policy. + + * [AmazonSageMakerHyperPodObservabilityAdminAccess](https://docs.aws.amazon.com/sagemaker/latest/dg/security-iam-awsmanpol-partner-apps.html#security-iam-awsmanpol-AmazonSageMakerHyperPodObservabilityAdminAccess) + +| July 10, 2025 @@ -13 +18 @@ Usage reporting in SageMaker HyperPod EKS-orchestrated clusters| Added usage rep -HyperPod updates from 12-05-2024 to 04-17-2025| Key Hyperpod updates since re:Invent 2024 include new IAM conditions keys in the `CreateCluster` and `UpdateCluster` API operations (controlling instance types, VPC subnets, and security group access), support for instance group deletion for EKS and Slurm orchestrated clusters, Nvidia toolkit security fixes, multi-AZ enhancements, IPv6 support, new instance types (I3en, M7i, R7i, C6gn, C6i, M6i, R6i, Trn1, Trn1n), CloudWatch metrics for Slurm clusters, added Direct Preference Optimization (DPO) recipe and tutorial for SageMaker HyperPod with Slurm orchestration, and a new quickstart deployment page with AWS CloudFormation templates. For more details, see [Hyperpod release notes](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-release-notes.html).| April 17, 2025 +HyperPod updates from 12-05-2024 to 04-17-2025| Key HyperPod updates since re:Invent 2024 include new IAM conditions keys in the `CreateCluster` and `UpdateCluster` API operations (controlling instance types, VPC subnets, and security group access), support for instance group deletion for EKS and Slurm orchestrated clusters, Nvidia toolkit security fixes, multi-AZ enhancements, IPv6 support, new instance types (I3en, M7i, R7i, C6gn, C6i, M6i, R6i, Trn1, Trn1n), CloudWatch metrics for Slurm clusters, added Direct Preference Optimization (DPO) recipe and tutorial for SageMaker HyperPod with Slurm orchestration, and a new quickstart deployment page with AWS CloudFormation templates. For more details, see [HyperPod release notes](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-release-notes.html).| April 17, 2025 @@ -34 +39 @@ New features for re:Invent 2024| The following new features were introduced at r - * [Amazon SageMaker training plan](https://docs.aws.amazon.com/sagemaker/latest/dg/reserve-capacity-with-training-plans.html) \- a compute reservation capability designed for large-scale AI model training workloads running on SageMaker training jobs and Hyperpod clusters + * [Amazon SageMaker training plan](https://docs.aws.amazon.com/sagemaker/latest/dg/reserve-capacity-with-training-plans.html) \- a compute reservation capability designed for large-scale AI model training workloads running on SageMaker training jobs and HyperPod clusters