AWS next-generation-sagemaker medium security documentation change
Summary
Added instructions for password setup via email, navigation to SageMaker Unified Studio, and MFA requirements during sign-in. Fixed a typo in domain creation step.
Security assessment
The change explicitly adds documentation about MFA enforcement during sign-in, which is a security feature. It also clarifies authentication workflows (SSO credentials and password setup via email), directly addressing secure access controls. The MFA requirement and SSO integration are security best practices.
Diff
diff --git a/next-generation-sagemaker/latest/userguide/setting-up.md b/next-generation-sagemaker/latest/userguide/setting-up.md index 955789c17..c4304734d 100644 --- a//next-generation-sagemaker/latest/userguide/setting-up.md +++ b//next-generation-sagemaker/latest/userguide/setting-up.md @@ -54 +54 @@ If you choose to create a new VPC, note that the VPC template with which it is c - 5. Expand the **Quick setup settings** section and review the specified configurations for the domain. Leave these defaults and then choose **Continue** to proceed with creating you domain. + 5. Expand the **Quick setup settings** section and review the specified configurations for the domain. Leave these defaults and then choose **Continue** to proceed with creating your domain. @@ -66,0 +67,2 @@ For more information, see [IAM roles for Amazon SageMaker Unified Studio](https: +After some time, an email will be sent to the address you provided as part of the IAM Identity Center user setup. The email will prompt you to set a password that you can use to access the domain. + @@ -70,0 +73,8 @@ In Amazon SageMaker, projects enable a group of users to collaborate on various +### Navigate to Amazon SageMaker Unified Studio + +To begin creating a project, navigate to Amazon SageMaker Unified Studio. You can do this by using the link in your email that you used to set an IAM Identity Center password, or by selecting the domain in the Amazon SageMaker management console and choosing **Open unified studio**. + +Sign in using your SSO credentials that you configured using the email from IAM Identity Center. + +If your IAM Identity Center is configured to require multi-factor authentication (MFA), set up and use an MFA device. Follow the instructions on the screen to register or use an MFA device as needed, or contact your admin for support. For more information about configuring MFA device enforcement, see [Configure MFA device enforcement](https://docs.aws.amazon.com/singlesignon/latest/userguide/how-to-configure-mfa-device-enforcement.html) in the IAM Identity Center User Guide. + @@ -73 +83 @@ In Amazon SageMaker, projects enable a group of users to collaborate on various -To begin creating a project, navigate to the Amazon SageMaker landing page and choose **Create project**. +After navigating to Amazon SageMaker Unified Studio, choose **Create project**.