AWS sagemaker documentation change
Summary
Fixed URL formatting in cross-account access documentation
Security assessment
URL path correction (added double slash) without altering security content or introducing new security documentation.
Diff
diff --git a/sagemaker/latest/dg/security_iam_service-with-iam.md b/sagemaker/latest/dg/security_iam_service-with-iam.md index 0c87d29d8..576689459 100644 --- a//sagemaker/latest/dg/security_iam_service-with-iam.md +++ b//sagemaker/latest/dg/security_iam_service-with-iam.md @@ -46 +46 @@ Resource-based policies are JSON policy documents that you attach to a resource. -To enable cross-account access, you can specify an entire account or IAM entities in another account as the principal in a resource-based policy. Adding a cross-account principal to a resource-based policy is only half of establishing the trust relationship. When the principal and the resource are in different AWS accounts, an IAM administrator in the trusted account must also grant the principal entity (user or role) permission to access the resource. They grant permission by attaching an identity-based policy to the entity. However, if a resource-based policy grants access to a principal in the same account, no additional identity-based policy is required. For more information, see [Cross account resource access in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies-cross-account-resource-access.html) in the _IAM User Guide_. +To enable cross-account access, you can specify an entire account or IAM entities in another account as the principal in a resource-based policy. Adding a cross-account principal to a resource-based policy is only half of establishing the trust relationship. When the principal and the resource are in different AWS accounts, an IAM administrator in the trusted account must also grant the principal entity (user or role) permission to access the resource. They grant permission by attaching an identity-based policy to the entity. However, if a resource-based policy grants access to a principal in the same account, no additional identity-based policy is required. For more information, see [Cross account resource access in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies-cross-account-resource-access.html) in the _IAM User Guide_.