AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-28 · Documentation medium

File: cli/latest/reference/sagemaker/create-cluster.md

Summary

Added --cluster-role and --auto-scaling parameters for cluster autoscaling configuration with IAM role requirements

Security assessment

The change introduces documentation about required IAM roles (cluster-role ARN) with specific permissions (sagemaker:BatchAddClusterNodes and sagemaker:BatchDeleteClusterNodes) for autoscaling operations. While this relates to security through IAM permissions, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/sagemaker/create-cluster.md b/cli/latest/reference/sagemaker/create-cluster.md
index 8f4977f5d..9e2f96168 100644
--- a//cli/latest/reference/sagemaker/create-cluster.md
+++ b//cli/latest/reference/sagemaker/create-cluster.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.19 Command Reference](../../index.html) »
@@ -74,0 +75,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema
+    [--cluster-role <value>]
+    [--auto-scaling <value>]
@@ -733,0 +736,31 @@ JSON Syntax:
+`--cluster-role` (string)
+
+> The Amazon Resource Name (ARN) of the IAM role that HyperPod assumes to perform cluster autoscaling operations. This role must have permissions for `sagemaker:BatchAddClusterNodes` and `sagemaker:BatchDeleteClusterNodes` . This is only required when autoscaling is enabled and when HyperPod is performing autoscaling operations.
+
+`--auto-scaling` (structure)
+
+> The autoscaling configuration for the cluster. Enables automatic scaling of cluster nodes based on workload demand using a Karpenter-based system.
+> 
+> Mode -> (string)
+>
+>> Describes whether autoscaling is enabled or disabled for the cluster. Valid values are `Enable` and `Disable` .
+> 
+> AutoScalerType -> (string)
+>
+>> The type of autoscaler to use. Currently supported value is `Karpenter` .
+
+Shorthand Syntax:
+    
+    
+    Mode=string,AutoScalerType=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "Mode": "Enable"|"Disable",
+      "AutoScalerType": "Karpenter"
+    }
+    
+
@@ -847 +880 @@ ClusterArn -> (string)
-  * [AWS CLI 2.28.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.19 Command Reference](../../index.html) »