AWS sagemaker documentation change
Summary
Updated JSON policy formatting and added region specificity in resource ARNs
Security assessment
Changes improve policy syntax consistency and example accuracy but do not modify security controls or address vulnerabilities
Diff
diff --git a/sagemaker/latest/dg/clarify-foundation-model-evaluate-human.md b/sagemaker/latest/dg/clarify-foundation-model-evaluate-human.md index 39bc603dd..ae739f9c8 100644 --- a//sagemaker/latest/dg/clarify-foundation-model-evaluate-human.md +++ b//sagemaker/latest/dg/clarify-foundation-model-evaluate-human.md @@ -117,2 +117,2 @@ JSON - "Statement": - [{ + "Statement": [ + { @@ -143,2 +143,2 @@ JSON - "arn:aws:sagemaker:{region}:{account-id}:endpoint/sm-margaret-*", - "arn:aws:sagemaker:{region}:{account-id}:endpoint-config/sm-margaret-*" + "arn:aws:sagemaker:us-east-1:{account-id}:endpoint/sm-margaret-*", + "arn:aws:sagemaker:us-east-1:{account-id}:endpoint-config/sm-margaret-*" @@ -169 +169 @@ JSON - "Resource": "arn:aws:sagemaker:{region}:{account-id}:model/*", + "Resource": "arn:aws:sagemaker:us-east-1:{account-id}:model/*", @@ -193 +193 @@ JSON - "Resource": "arn:aws:logs:{region}:{account-id}:log-group:/aws/sagemaker/ProcessingJobs:*" + "Resource": "arn:aws:logs:us-east-1:{account-id}:log-group:/aws/sagemaker/ProcessingJobs:*" @@ -221 +221 @@ JSON - "arn:aws:kms:{region}:{account-id}:key/{kms-key-id}" + "arn:aws:kms:us-east-1:{account-id}:key/{kms-key-id}" @@ -229 +229 @@ JSON - "Resource": "arn:aws:iam::{account-id}:role/{this-role-created-by-customer}", + "Resource": "arn:aws:iam::111122223333:role/{this-role-created-by-customer}", @@ -237 +237,2 @@ JSON - }] + } + ]