AWS sagemaker documentation change
Summary
Expanded compatibility list and added AWS Glue Connections integration
Security assessment
Adds documentation about integration with AWS Glue Connections' security features and clarifies identity context usage. While security-related, there's no evidence this addresses a specific vulnerability.
Diff
diff --git a/sagemaker/latest/dg/trustedidentitypropagation-compatibility.md b/sagemaker/latest/dg/trustedidentitypropagation-compatibility.md index 4de187956..4abe294ae 100644 --- a//sagemaker/latest/dg/trustedidentitypropagation-compatibility.md +++ b//sagemaker/latest/dg/trustedidentitypropagation-compatibility.md @@ -43 +43 @@ Trusted identity propagation works with the following Studio features: - * [Studio](https://docs.aws.amazon.com/sagemaker/latest/dg/studio-updated-launch.html) private spaces + * [Amazon SageMaker Studio](https://docs.aws.amazon.com/sagemaker/latest/dg/studio-updated-launch.html) private spaces (JupyterLab and Code Editor, based on Code-OSS, Visual Studio Code - Open Source) @@ -50 +50 @@ Trusted identity propagation works with the following Studio features: - * When Studio launches with trusted identity propagation enabled, it uses your identity context in addition to your execution role permissions. However, the following processes during instance setup will only use the execution role permissions, without the identity context: Lifecycle Configuration, Bring-Your-Own-Image, CloudWatch agent for user log forwarding + * When Studio launches with trusted identity propagation enabled, it uses your identity context in addition to your execution role permissions. However, the following processes during instance setup will only use the execution role permissions, without the identity context: Lifecycle Configuration, Bring-Your-Own-Image, CloudWatch agent for user log forwarding. @@ -57 +57 @@ Trusted identity propagation works with the following Studio features: - * [Training](https://docs.aws.amazon.com/sagemaker/latest/dg/how-it-works-training.html) + * [SageMaker Training](https://docs.aws.amazon.com/sagemaker/latest/dg/how-it-works-training.html) @@ -59 +59 @@ Trusted identity propagation works with the following Studio features: - * [Processing](https://docs.aws.amazon.com/sagemaker/latest/dg/processing-job.html) + * [SageMaker Processing](https://docs.aws.amazon.com/sagemaker/latest/dg/processing-job.html) @@ -61 +61 @@ Trusted identity propagation works with the following Studio features: - * [Hosting](https://docs.aws.amazon.com/sagemaker/latest/dg/realtime-endpoints-options.html) + * [SageMaker AI realtime hosting](https://docs.aws.amazon.com/sagemaker/latest/dg/realtime-endpoints-options.html) @@ -63 +63,7 @@ Trusted identity propagation works with the following Studio features: - * [Pipelines](https://docs.aws.amazon.com/sagemaker/latest/dg/pipelines-overview.html) + * [SageMaker Pipelines](https://docs.aws.amazon.com/sagemaker/latest/dg/pipelines-overview.html) + + * [SageMaker real-time inference](https://docs.aws.amazon.com/sagemaker/latest/dg/realtime-endpoints.html) + + * [SageMaker Asynchronous Inference](https://docs.aws.amazon.com/sagemaker/latest/dg/async-inference.html) + + * [Managed MLflow](https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow.html) @@ -83,0 +90,2 @@ Trusted identity propagation for Amazon SageMaker Studio integrates with compati + * [AWS Glue Connections](https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation.html) +