AWS cli documentation change
Summary
Added documentation for RestrictedInstanceGroups configuration including execution roles, security groups, storage configs, health checks, and VPC settings
Security assessment
The changes document security-related configurations including execution roles, VPC security groups, and storage encryption settings. However, there's no indication these changes address an existing security vulnerability - they appear to be standard documentation of security features for new HyperPod cluster capabilities.
Diff
diff --git a/cli/latest/reference/sagemaker/describe-cluster.md b/cli/latest/reference/sagemaker/describe-cluster.md index 5b6c1dbed..bf0b9b87c 100644 --- a//cli/latest/reference/sagemaker/describe-cluster.md +++ b//cli/latest/reference/sagemaker/describe-cluster.md @@ -15 +15 @@ - * [AWS CLI 2.27.50 Command Reference](../../index.html) » + * [AWS CLI 2.27.51 Command Reference](../../index.html) » @@ -383,0 +384,171 @@ InstanceGroups -> (list) +RestrictedInstanceGroups -> (list) + +> The specialized instance groups for training models like Amazon Nova to be created in the SageMaker HyperPod cluster. +> +> (structure) +> +>> The instance group details of the restricted instance group (RIG). +>> +>> CurrentCount -> (integer) +>> +>>> The number of instances that are currently in the restricted instance group of a SageMaker HyperPod cluster. +>> +>> TargetCount -> (integer) +>> +>>> The number of instances you specified to add to the restricted instance group of a SageMaker HyperPod cluster. +>> +>> InstanceGroupName -> (string) +>> +>>> The name of the restricted instance group of a SageMaker HyperPod cluster. +>> +>> InstanceType -> (string) +>> +>>> The instance type of the restricted instance group of a SageMaker HyperPod cluster. +>> +>> ExecutionRole -> (string) +>> +>>> The execution role for the restricted instance group to assume. +>> +>> ThreadsPerCore -> (integer) +>> +>>> The number you specified to `TreadsPerCore` in `CreateCluster` for enabling or disabling multithreading. For instance types that support multithreading, you can specify 1 for disabling multithreading and 2 for enabling multithreading. For more information, see the reference table of [CPU cores and threads per CPU core per instance type](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html) in the _Amazon Elastic Compute Cloud User Guide_ . +>> +>> InstanceStorageConfigs -> (list) +>> +>>> The additional storage configurations for the instances in the SageMaker HyperPod cluster restricted instance group. +>>> +>>> (tagged union structure) +>>> +>>>> Defines the configuration for attaching additional storage to the instances in the SageMaker HyperPod cluster instance group. To learn more, see [SageMaker HyperPod release notes: June 20, 2024](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-release-notes.html#sagemaker-hyperpod-release-notes-20240620) . +>>>> +>>>> ### Note +>>>> +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `EbsVolumeConfig`. +>>>> +>>>> EbsVolumeConfig -> (structure) +>>>> +>>>>> Defines the configuration for attaching additional Amazon Elastic Block Store (EBS) volumes to the instances in the SageMaker HyperPod cluster instance group. The additional EBS volume is attached to each instance within the SageMaker HyperPod cluster instance group and mounted to `/opt/sagemaker` . +>>>>> +>>>>> VolumeSizeInGB -> (integer) +>>>>> +>>>>>> The size in gigabytes (GB) of the additional EBS volume to be attached to the instances in the SageMaker HyperPod cluster instance group. The additional EBS volume is attached to each instance within the SageMaker HyperPod cluster instance group and mounted to `/opt/sagemaker` . +>> +>> OnStartDeepHealthChecks -> (list) +>> +>>> A flag indicating whether deep health checks should be performed when the cluster’s restricted instance group is created or updated. +>>> +>>> (string) +>> +>> Status -> (string) +>> +>>> The current status of the cluster’s restricted instance group. +>>> +>>> * `InService` : The restricted instance group is active and healthy. +>>> * `Creating` : The restricted instance group is being provisioned. +>>> * `Updating` : The restricted instance group is being updated. +>>> * `Failed` : The restricted instance group has failed to provision or is no longer healthy. +>>> * `Degraded` : The restricted instance group is degraded, meaning that some instances have failed to provision or are no longer healthy. +>>> * `Deleting` : The restricted instance group is being deleted. +>>> + +>> +>> TrainingPlanArn -> (string) +>> +>>> The Amazon Resource Name (ARN) of the training plan to filter clusters by. For more information about reserving GPU capacity for your SageMaker HyperPod clusters using Amazon SageMaker Training Plan, see `` [CreateTrainingPlan](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingPlan.html) `` . +>> +>> TrainingPlanStatus -> (string) +>> +>>> The current status of the training plan associated with this cluster restricted instance group. +>> +>> OverrideVpcConfig -> (structure) +>> +>>> Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC. For more information, see [Give SageMaker Access to Resources in your Amazon VPC](https://docs.aws.amazon.com/sagemaker/latest/dg/infrastructure-give-access.html) . +>>> +>>> SecurityGroupIds -> (list) +>>> +>>>> The VPC security group IDs, in the form `sg-xxxxxxxx` . Specify the security groups for the VPC that is specified in the `Subnets` field. +>>>> +>>>> (string) +>>> +>>> Subnets -> (list) +>>> +>>>> The ID of the subnets in the VPC to which you want to connect your training job or model. For information about the availability of specific instance types, see [Supported Instance Types and Availability Zones](https://docs.aws.amazon.com/sagemaker/latest/dg/instance-types-az.html) . +>>>> +>>>> (string) +>> +>> ScheduledUpdateConfig -> (structure) +>> +>>> The configuration object of the schedule that SageMaker follows when updating the AMI. +>>> +>>> ScheduleExpression -> (string) +>>> +>>>> A cron expression that specifies the schedule that SageMaker follows when updating the AMI. +>>> +>>> DeploymentConfig -> (structure) +>>> +>>>> The configuration to use when updating the AMI versions. +>>>> +>>>> RollingUpdatePolicy -> (structure) +>>>> +>>>>> The policy that SageMaker uses when updating the AMI versions of the cluster. +>>>>> +>>>>> MaximumBatchSize -> (structure) +>>>>> +>>>>>> The maximum amount of instances in the cluster that SageMaker can update at a time. +>>>>>> +>>>>>> Type -> (string) +>>>>>> +>>>>>>> Specifies whether SageMaker should process the update by amount or percentage of instances. +>>>>>> +>>>>>> Value -> (integer) +>>>>>> +>>>>>>> Specifies the amount or percentage of instances SageMaker updates at a time. +>>>>> +>>>>> RollbackMaximumBatchSize -> (structure) +>>>>> +>>>>>> The maximum amount of instances in the cluster that SageMaker can roll back at a time. +>>>>>> +>>>>>> Type -> (string) +>>>>>> +>>>>>>> Specifies whether SageMaker should process the update by amount or percentage of instances. +>>>>>> +>>>>>> Value -> (integer) +>>>>>> +>>>>>>> Specifies the amount or percentage of instances SageMaker updates at a time. +>>>> +>>>> WaitIntervalInSeconds -> (integer) +>>>> +>>>>> The duration in seconds that SageMaker waits before updating more instances in the cluster. +>>>> +>>>> AutoRollbackConfiguration -> (list) +>>>> +>>>>> An array that contains the alarms that SageMaker monitors to know whether to roll back the AMI update. +>>>>> +>>>>> (structure) +>>>>> +>>>>>> The details of the alarm to monitor during the AMI update. +>>>>>> +>>>>>> AlarmName -> (string) +>>>>>> +>>>>>>> The name of the alarm. +>> +>> EnvironmentConfig -> (structure) +>> +>>> The configuration for the restricted instance groups (RIG) environment. +>>> +>>> FSxLustreConfig -> (structure) +>>> +>>>> Configuration settings for an Amazon FSx for Lustre file system to be used with the cluster. +>>>> +>>>> SizeInGiB -> (integer) +>>>> +>>>>> The storage capacity of the Amazon FSx for Lustre file system, specified in gibibytes (GiB). +>>>> +>>>> PerUnitStorageThroughput -> (integer) +>>>> +>>>>> The throughput capacity of the Amazon FSx for Lustre file system, measured in MB/s per TiB of storage. +>>> +>>> S3OutputPath -> (string) +>>> +>>>> The Amazon S3 path where output data from the restricted instance group (RIG) environment will be stored. + @@ -426 +597 @@ NodeRecovery -> (string) - * [AWS CLI 2.27.50 Command Reference](../../index.html) » + * [AWS CLI 2.27.51 Command Reference](../../index.html) »