AWS Security ChangesHomeSearch

AWS sagemaker high security documentation change

Service: sagemaker · 2025-08-28 · Security-related high

File: sagemaker/latest/dg/pre-built-containers-support-policy.md

Summary

Added deprecation notice for forecasting-deepar container and updated end-of-patch dates. Explicitly states security patch discontinuation for this container.

Security assessment

The change directly addresses security risks by warning users about discontinued security patches for the forecasting-deepar container. The explicit statement 'incur additional risk' and reference to end-of-maintenance for MXNet framework indicate potential security implications for continued use.

Diff

diff --git a/sagemaker/latest/dg/pre-built-containers-support-policy.md b/sagemaker/latest/dg/pre-built-containers-support-policy.md
index a71a4900f..ac3bfacac 100644
--- a//sagemaker/latest/dg/pre-built-containers-support-policy.md
+++ b//sagemaker/latest/dg/pre-built-containers-support-policy.md
@@ -16,0 +17,4 @@ SageMaker AI doesn't release out-of-patch images for containers in new AWS Regio
+###### Note
+
+As of August 2024, the `forecasting-deepar` container is no longer receiving security patches or updates. While you can continue to use this container, you incur additional risk. Containers are deprecated when the entire framework or algorithms is no longer supported, and the underlying MXNet framework for the container has reached end-of-maintenance.
+
@@ -77 +81 @@ Image container | End of patch
-`forecasting-deepar:latest` | Until image deprecation is announced  
+`forecasting-deepar:latest` | 08/26/2025  
@@ -130,0 +135,2 @@ The following containers no longer receive support:
+  * As of August 2024, the `forecasting-deepar` container is no longer receiving security patches or updates due to the underlying MXNet framework for the container reaching end-of-maintenance.
+