AWS braket medium security documentation change

Service: braket · 2025-08-10 · Security-related medium

File: braket/latest/developerguide/restrict-access-notebook-instances.md

Summary

Added explicit SID identifiers to IAM policy examples restricting notebook instance operations

Security assessment

Added specific policy statements (DenyCreateDeleteUpdateNotebookInstances, DenyDescribeStartStopNotebookInstances, DenyNotebookInstanceUrl) that explicitly restrict sensitive notebook instance operations. This demonstrates security hardening through IAM policy granularity.

Diff

diff --git a/braket/latest/developerguide/restrict-access-notebook-instances.md b/braket/latest/developerguide/restrict-access-notebook-instances.md
index 9f59774ea..a3366cdae 100644
--- a//braket/latest/developerguide/restrict-access-notebook-instances.md
+++ b//braket/latest/developerguide/restrict-access-notebook-instances.md
@@ -10,0 +11,6 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la
+JSON
+    
+
+****
+    
+    
@@ -15,0 +22 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la
+          "Sid": "DenyCreateDeleteUpdateNotebookInstances",
@@ -27,0 +35 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la
+          "Sid": "DenyDescribeStartStopNotebookInstances",
@@ -32 +40 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la
-            "sagemaker:StopNotebookInstance",
+            "sagemaker:StopNotebookInstance"
@@ -38,0 +47 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la
+          "Sid": "DenyNotebookInstanceUrl",