AWS sagemaker-unified-studio documentation change
Summary
Added API/CLI examples with security configurations for Redshift data sources
Security assessment
The added payload examples demonstrate secure practices including IAM role usage (dataAccessRole) and Secrets Manager integration for credential storage. While these are security-conscious implementations, the change appears to be general documentation expansion rather than addressing a specific security issue.
Diff
diff --git a/sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md b/sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md index b81f9ee20..1594e8fcf 100644 --- a//sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md +++ b//sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon SageMaker Unified Studio](/sagemaker/index.html)[User Guide](what-is-sagemaker-unified-studio.html) +[Documentation](/index.html)[Amazon SageMaker Unified Studio](/next-generation-sagemaker/index.html)[User Guide](what-is-sagemaker-unified-studio.html) @@ -61,0 +62,108 @@ You can add multiple include rules. You can also add another schema using the ** +You can also create a Amazon SageMaker Unified Studio data source for Amazon Redshift by invoking the `CreateDataSource` API action or the `create-data-source` CLI action: + + + aws datazone create-data-source --cli-input-json file://create-sagemaker-datasource-example.json + + +Sample payload (create-sagemaker-datasource-example.json per example above) to create an Amazon Sagemaker data sources in an Amazon DataZone domain: + + + { + "name": "my-data-source", + "projectIdentifier": "project123", + "type": "REDSHIFT", + "description": "Description of the datasource", + "environmentIdentifier": "environment123", + "configuration": { + "redshiftRunConfiguration": { + "dataAccessRole": "arn:aws:iam::123456789012:role/my-data-access-role", + "redshiftCredentialConfiguration": { + "secretManagerArn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-secret" + }, + "redshiftStorage": { + "redshiftClusterSource": { + "clusterName": "my-redshift-cluster" + } + }, + "relationalFilterConfigurations": [{ + "databaseName": "my_database", + "filterExpressions": [{ + "expression": "*", + "type": "INCLUDE" + }], + "schemaName": "my_schema" + }] + } + }, + "recommendation": { + "enableBusinessNameGeneration": "True" + }, + "enableSetting": "ENABLED", + "schedule": { + "timezone": "UTC", + "schedule": "cron(7 22 * * ? *)" + }, + "publishOnImport": "True", + "assetFormsInput": [ + { + "formName": "AssetCommonDetailsForm" + "typeIdentifier": "amazon.datazone.AssetCommonDetailsFormType", + "typeRevision": "3", + "content": "form-content" + } + ], + "clientToken": "123456" + } + + +Sample payload (create-sagemaker-datasource-example.json per example above) to create an Amazon Sagemaker data sources in an Amazon SageMaker unified domain: + + + { + "name": "my-data-source", + "projectIdentifier": "project123", + "type": "REDSHIFT", + "description": "Description of the datasource", + "connectionIdentifier": "connection123", + "configuration": { + "redshiftRunConfiguration": { + "dataAccessRole": "arn:aws:iam::123456789012:role/my-data-access-role", + "redshiftCredentialConfiguration": { + "secretManagerArn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-secret" + }, + "redshiftStorage": { + "redshiftClusterSource": { + "clusterName": "my-redshift-cluster" + } + }, + "relationalFilterConfigurations": [{ + "databaseName": "my_database", + "filterExpressions": [{ + "expression": "*", + "type": "INCLUDE" + }], + "schemaName": "my_schema" + }] + } + }, + "recommendation": { + "enableBusinessNameGeneration": "True" + }, + "enableSetting": "ENABLED", + "schedule": { + "timezone": "UTC", + "schedule": "cron(7 22 * * ? *)" + }, + "publishOnImport": "True", + "assetFormsInput": [ + { + "formName": "AssetCommonDetailsForm" + "typeIdentifier": "amazon.datazone.AssetCommonDetailsFormType", + "typeRevision": "3", + "content": "form-content" + } + ], + "clientToken": "123456" + } + + @@ -70 +178 @@ Create a data source for AWS Glue -Edit a data source +Create a data source for Amazon SageMaker AI