AWS Security ChangesHomeSearch

AWS sagemaker-unified-studio documentation change

Service: sagemaker-unified-studio · 2025-08-28 · Documentation low

File: sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md

Summary

Added API/CLI examples with security configurations for Redshift data sources

Security assessment

The added payload examples demonstrate secure practices including IAM role usage (dataAccessRole) and Secrets Manager integration for credential storage. While these are security-conscious implementations, the change appears to be general documentation expansion rather than addressing a specific security issue.

Diff

diff --git a/sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md b/sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md
index b81f9ee20..1594e8fcf 100644
--- a//sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md
+++ b//sagemaker-unified-studio/latest/userguide/create-redshift-data-source.md
@@ -3 +3 @@
-[Documentation](/index.html)[Amazon SageMaker Unified Studio](/sagemaker/index.html)[User Guide](what-is-sagemaker-unified-studio.html)
+[Documentation](/index.html)[Amazon SageMaker Unified Studio](/next-generation-sagemaker/index.html)[User Guide](what-is-sagemaker-unified-studio.html)
@@ -61,0 +62,108 @@ You can add multiple include rules. You can also add another schema using the **
+You can also create a Amazon SageMaker Unified Studio data source for Amazon Redshift by invoking the `CreateDataSource` API action or the `create-data-source` CLI action:
+    
+    
+    aws datazone create-data-source --cli-input-json file://create-sagemaker-datasource-example.json
+            
+
+Sample payload (create-sagemaker-datasource-example.json per example above) to create an Amazon Sagemaker data sources in an Amazon DataZone domain:
+    
+    
+    {
+      "name": "my-data-source",
+      "projectIdentifier": "project123",
+      "type": "REDSHIFT",
+      "description": "Description of the datasource",
+      "environmentIdentifier": "environment123",  
+      "configuration": {
+        "redshiftRunConfiguration": {
+            "dataAccessRole": "arn:aws:iam::123456789012:role/my-data-access-role",
+            "redshiftCredentialConfiguration": {
+                    "secretManagerArn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-secret"
+                },
+            "redshiftStorage": {
+                "redshiftClusterSource": {
+                    "clusterName": "my-redshift-cluster"
+                }
+            },
+            "relationalFilterConfigurations": [{
+                "databaseName": "my_database",
+                "filterExpressions": [{
+                    "expression": "*",
+                    "type": "INCLUDE"
+                }],
+                "schemaName": "my_schema"
+            }]
+        }
+      },
+      "recommendation": {
+        "enableBusinessNameGeneration": "True"
+      },
+      "enableSetting": "ENABLED",
+      "schedule": {
+        "timezone": "UTC",
+        "schedule": "cron(7 22 * * ? *)"
+      },
+      "publishOnImport": "True",
+      "assetFormsInput": [
+        {
+          "formName": "AssetCommonDetailsForm"
+          "typeIdentifier": "amazon.datazone.AssetCommonDetailsFormType",
+          "typeRevision": "3",
+          "content": "form-content"
+        }
+      ],
+      "clientToken": "123456"
+    }
+            
+
+Sample payload (create-sagemaker-datasource-example.json per example above) to create an Amazon Sagemaker data sources in an Amazon SageMaker unified domain:
+    
+    
+    {
+      "name": "my-data-source",
+      "projectIdentifier": "project123",
+      "type": "REDSHIFT",
+      "description": "Description of the datasource",
+      "connectionIdentifier": "connection123",  
+      "configuration": {
+        "redshiftRunConfiguration": {
+            "dataAccessRole": "arn:aws:iam::123456789012:role/my-data-access-role",
+            "redshiftCredentialConfiguration": {
+                    "secretManagerArn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-secret"
+                },
+            "redshiftStorage": {
+                "redshiftClusterSource": {
+                    "clusterName": "my-redshift-cluster"
+                }
+            },
+            "relationalFilterConfigurations": [{
+                "databaseName": "my_database",
+                "filterExpressions": [{
+                    "expression": "*",
+                    "type": "INCLUDE"
+                }],
+                "schemaName": "my_schema"
+            }]
+        }
+      },
+      "recommendation": {
+        "enableBusinessNameGeneration": "True"
+      },
+      "enableSetting": "ENABLED",
+      "schedule": {
+        "timezone": "UTC",
+        "schedule": "cron(7 22 * * ? *)"
+      },
+      "publishOnImport": "True",
+      "assetFormsInput": [
+        {
+          "formName": "AssetCommonDetailsForm"
+          "typeIdentifier": "amazon.datazone.AssetCommonDetailsFormType",
+          "typeRevision": "3",
+          "content": "form-content"
+        }
+      ],
+      "clientToken": "123456"
+    }
+            
+
@@ -70 +178 @@ Create a data source for AWS Glue
-Edit a data source
+Create a data source for Amazon SageMaker AI