AWS braket documentation change
Summary
Removed example deny policy for SageMaker notebook instance operations
Security assessment
Deletion of access restriction examples reduces security guidance visibility but doesn't fix a security flaw. No evidence of policy being insecure.
Diff
diff --git a/braket/latest/developerguide/restrict-access-notebook-instances.md b/braket/latest/developerguide/restrict-access-notebook-instances.md index a3366cdae..79ae31e9d 100644 --- a//braket/latest/developerguide/restrict-access-notebook-instances.md +++ b//braket/latest/developerguide/restrict-access-notebook-instances.md @@ -11,49 +10,0 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "DenyCreateDeleteUpdateNotebookInstances", - "Effect": "Deny", - "Action": [ - "sagemaker:CreateNotebookInstance", - "sagemaker:DeleteNotebookInstance", - "sagemaker:UpdateNotebookInstance", - "sagemaker:CreateNotebookInstanceLifecycleConfig", - "sagemaker:DeleteNotebookInstanceLifecycleConfig", - "sagemaker:UpdateNotebookInstanceLifecycleConfig" - ], - "Resource": "*" - }, - { - "Sid": "DenyDescribeStartStopNotebookInstances", - "Effect": "Deny", - "Action": [ - "sagemaker:DescribeNotebookInstance", - "sagemaker:StartNotebookInstance", - "sagemaker:StopNotebookInstance" - ], - "NotResource": [ - "arn:aws:sagemaker:*:123456789012:notebook-instance/amazon-braket-${aws:username}" - ] - }, - { - "Sid": "DenyNotebookInstanceUrl", - "Effect": "Deny", - "Action": [ - "sagemaker:CreatePresignedNotebookInstanceUrl" - ], - "NotResource": [ - "arn:aws:sagemaker:*:123456789012:notebook-instance/amazon-braket-${aws:username}*" - ] - } - ] - } - -