AWS sagemaker-unified-studio documentation change

Service: sagemaker-unified-studio · 2025-07-18 · Documentation low

File: sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-AmazonDataZoneBedrockModelManagementPolicy.md

Summary

Replaced inline IAM policy details with a reference to AWS Managed Policy documentation.

Security assessment

This change documents security-related IAM permissions for managing Amazon Bedrock models but shows no evidence of addressing a specific vulnerability. The policy governs model access management capabilities.

Diff

diff --git a/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-AmazonDataZoneBedrockModelManagementPolicy.md b/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-AmazonDataZoneBedrockModelManagementPolicy.md
index 71de5fddc..8e0699785 100644
--- a//sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-AmazonDataZoneBedrockModelManagementPolicy.md
+++ b//sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-AmazonDataZoneBedrockModelManagementPolicy.md
@@ -9,75 +9 @@ Provides permissions to manage Amazon Bedrock model access, including creating,
-    
-    {
-    	"Version": "2012-10-17",
-    	"Statement": [
-    		{
-    			"Sid": "ManageApplicationInferenceProfile",
-    			"Effect": "Allow",
-    			"Action": [
-    				"bedrock:CreateInferenceProfile",
-    				"bedrock:TagResource"
-    			],
-    			"Resource": [
-    				"arn:aws:bedrock:*:*:application-inference-profile/*"
-    			],
-    			"Condition": {
-    				"StringEquals": {
-    					"aws:ResourceAccount": "${aws:PrincipalAccount}"
-    				},
-    				"ForAnyValue:StringEquals": {
-    					"aws:TagKeys": [
-    						"AmazonDataZoneProject"
-    					]
-    				},
-    				"Null": {
-    					"aws:ResourceTag/AmazonDataZoneProject": "false",
-    					"aws:RequestTag/AmazonDataZoneProject": "false"
-    				}
-    			}
-    		},
-    		{
-    			"Sid": "DeleteApplicationInferenceProfile",
-    			"Effect": "Allow",
-    			"Action": [
-    				"bedrock:DeleteInferenceProfile"
-    			],
-    			"Resource": [
-    				"arn:aws:bedrock:*:*:application-inference-profile/*"
-    			],
-    			"Condition": {
-    				"StringEquals": {
-    					"aws:ResourceAccount": "${aws:PrincipalAccount}"
-    				},
-    				"Null": {
-    					"aws:ResourceTag/AmazonDataZoneProject": "false"
-    				}
-    			}
-    		},
-    		{
-    			"Sid": "CreateApplicationInferenceProfileUsingFoundationModels",
-    			"Effect": "Allow",
-    			"Action": [
-    				"bedrock:CreateInferenceProfile"
-    			],
-    			"Resource": [
-    				"arn:aws:bedrock:*::foundation-model/*"
-    			]
-    		},
-    		{
-    			"Sid": "CreateApplicationInferenceProfileUsingBedrockModels",
-    			"Effect": "Allow",
-    			"Action": [
-    				"bedrock:CreateInferenceProfile"
-    			],
-    			"Resource": [
-    				"arn:aws:bedrock:*:*:inference-profile/*"
-    			],
-    			"Condition": {
-    				"StringEquals": {
-    					"aws:ResourceAccount": "${aws:PrincipalAccount}"
-    				}
-    			}
-    		}
-    	]
-    }
-    		
+To view the permissions for this policy, see [AmazonDataZoneBedrockModelManagementPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonDataZoneBedrockModelManagementPolicy.html) in the _AWS Managed Policy Reference_.