AWS Security ChangesHomeSearch

AWS sagemaker documentation change

Service: sagemaker · 2025-07-25 · Documentation low

File: sagemaker/latest/dg/sagemaker-sql-extension-datasources-connection-permissions.md

Summary

Updated Glue, Athena, Secrets Manager, and Redshift ARNs with us-east-1 region in policy examples

Security assessment

Regional specification in resource ARNs improves example accuracy but doesn't modify security posture or document new security features. No vulnerability remediation evident.

Diff

diff --git a/sagemaker/latest/dg/sagemaker-sql-extension-datasources-connection-permissions.md b/sagemaker/latest/dg/sagemaker-sql-extension-datasources-connection-permissions.md
index 0e0b96dbc..35b633e40 100644
--- a//sagemaker/latest/dg/sagemaker-sql-extension-datasources-connection-permissions.md
+++ b//sagemaker/latest/dg/sagemaker-sql-extension-datasources-connection-permissions.md
@@ -61,2 +61,2 @@ JSON
-                    "arn:aws:glue:region:account_id:catalog",
-                    "arn:aws:glue:region:account_id:connection/*",
+                    "arn:aws:glue:us-east-1:account_id:catalog",
+                    "arn:aws:glue:us-east-1:account_id:connection/*",
@@ -90 +90 @@ JSON
-                    "arn:aws:athena:region:account_id:workgroup/workgroup-name",
+                    "arn:aws:athena:us-east-1:account_id:workgroup/workgroup-name",
@@ -102,2 +102,2 @@ JSON
-                    "arn:aws:glue:region:account_id:catalog",
-                    "arn:aws:glue:region:account_id:connection/*",
+                    "arn:aws:glue:us-east-1:account_id:catalog",
+                    "arn:aws:glue:us-east-1:account_id:connection/*",
@@ -114 +114 @@ JSON
-                    "arn:aws:secretsmanager:region:account_id:secret:secret-name",
+                    "arn:aws:secretsmanager:us-east-1:account_id:secret:secret-name",
@@ -125 +125 @@ JSON
-                    "arn:aws:redshift:region:account_id:cluster:cluster-name",
+                    "arn:aws:redshift:us-east-1:account_id:cluster:cluster-name",
@@ -304,2 +304,2 @@ JSON
-                    "arn:aws:glue:region:account_id:catalog",
-                    "arn:aws:glue:region:account_id:connection/*",
+                    "arn:aws:glue:us-east-1:account_id:catalog",
+                    "arn:aws:glue:us-east-1:account_id:connection/*",
@@ -316 +316 @@ JSON
-                    "arn:aws:secretsmanager:region:account_id:secret:secret-name",
+                    "arn:aws:secretsmanager:us-east-1:account_id:secret:secret-name",
@@ -327 +327 @@ JSON
-                    "arn:aws:redshift:region:account_id:cluster:cluster-name",
+                    "arn:aws:redshift:us-east-1:account_id:cluster:cluster-name",