AWS cli documentation change

Service: cli · 2025-08-13 · Documentation low

File: cli/latest/reference/sagemaker/update-domain.md

Summary

Added TrustedIdentityPropagationSettings parameter for configuring identity propagation

Security assessment

Enables configuration of security feature for identity propagation but shows no evidence of patching a vulnerability

Diff

diff --git a/cli/latest/reference/sagemaker/update-domain.md b/cli/latest/reference/sagemaker/update-domain.md
index 6db67d5ed..92bf634a6 100644
--- a//cli/latest/reference/sagemaker/update-domain.md
+++ b//cli/latest/reference/sagemaker/update-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
@@ -1115,0 +1116,17 @@ JSON Syntax:
+> 
+> TrustedIdentityPropagationSettings -> (structure)
+>
+>> The Trusted Identity Propagation (TIP) settings for the SageMaker domain. These settings determine how user identities from IAM Identity Center are propagated through the domain to TIP enabled Amazon Web Services services.
+>> 
+>> Status -> (string)
+>>
+>>> The status of Trusted Identity Propagation (TIP) at the SageMaker domain level.
+>>> 
+>>> When disabled, standard IAM role-based access is used.
+>>> 
+>>> When enabled:
+>>> 
+>>>   * User identities from IAM Identity Center are propagated through the application to TIP enabled Amazon Web Services services.
+>>>   * New applications or existing applications that are automatically patched, will use the domain level configuration.
+>>> 
+
@@ -1192 +1209 @@ Shorthand Syntax:
-    RStudioServerProDomainSettingsForUpdate={DomainExecutionRoleArn=string,DefaultResourceSpec={SageMakerImageArn=string,SageMakerImageVersionArn=string,SageMakerImageVersionAlias=string,InstanceType=string,LifecycleConfigArn=string},RStudioConnectUrl=string,RStudioPackageManagerUrl=string},ExecutionRoleIdentityConfig=string,SecurityGroupIds=string,string,DockerSettings={EnableDockerAccess=string,VpcOnlyTrustedAccounts=[string,string]},AmazonQSettings={Status=string,QProfileArn=string},UnifiedStudioSettings={StudioWebPortalAccess=string,DomainAccountId=string,DomainRegion=string,DomainId=string,ProjectId=string,EnvironmentId=string,ProjectS3Path=string,SingleSignOnApplicationArn=string}
+    RStudioServerProDomainSettingsForUpdate={DomainExecutionRoleArn=string,DefaultResourceSpec={SageMakerImageArn=string,SageMakerImageVersionArn=string,SageMakerImageVersionAlias=string,InstanceType=string,LifecycleConfigArn=string},RStudioConnectUrl=string,RStudioPackageManagerUrl=string},ExecutionRoleIdentityConfig=string,SecurityGroupIds=string,string,TrustedIdentityPropagationSettings={Status=string},DockerSettings={EnableDockerAccess=string,VpcOnlyTrustedAccounts=[string,string]},AmazonQSettings={Status=string,QProfileArn=string},UnifiedStudioSettings={StudioWebPortalAccess=string,DomainAccountId=string,DomainRegion=string,DomainId=string,ProjectId=string,EnvironmentId=string,ProjectS3Path=string,SingleSignOnApplicationArn=string}
@@ -1212,0 +1230,3 @@ JSON Syntax:
+      "TrustedIdentityPropagationSettings": {
+        "Status": "ENABLED"|"DISABLED"
+      },
@@ -1850 +1870 @@ DomainArn -> (string)
-  * [AWS CLI 2.28.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.8 Command Reference](../../index.html) »