AWS sagemaker-unified-studio high security documentation change

Service: sagemaker-unified-studio · 2025-11-22 · Security-related high

File: sagemaker-unified-studio/latest/adminguide/doc-history.md

Summary

Added policy update entries fixing KMS permissions for integration with Workflows, Scheduler, and DataZone Data Notebook

Security assessment

Explicitly addresses encryption (KMS) permission gaps in AWS managed policies, which could lead to unauthorized data access if unpatched.

Diff

diff --git a/sagemaker-unified-studio/latest/adminguide/doc-history.md b/sagemaker-unified-studio/latest/adminguide/doc-history.md
index 642888fde..3cff2d59a 100644
--- a//sagemaker-unified-studio/latest/adminguide/doc-history.md
+++ b//sagemaker-unified-studio/latest/adminguide/doc-history.md
@@ -10,0 +11,6 @@ Change| Description| Date
+Policy update - SageMakerStudioProjectUserRolePolicy| Policy updates to SageMakerStudioProjectUserRolePolicy - adding permissions to support integration with SageMaker Unified Studio MCP. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| November 21, 2025  
+Policy update - SageMakerStudioProjectUserRolePolicy| Policy updates to SageMakerStudioProjectUserRolePolicy - fix KMS permissions for integration with Scheduler. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| November 20, 2025  
+Policy update - SageMakerStudioUserIAMPermissiveExecutionPolicy| Policy updates to SageMakerStudioUserIAMPermissiveExecutionPolicy - fix KMS permissions for integration with Workflows, Scheduler, and DataZone Data Notebook. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| November 18, 2025  
+Policy update - SageMakerStudioUserIAMDefaultExecutionPolicy| Policy updates to SageMakerStudioUserIAMDefaultExecutionPolicy - fix KMS permissions for integration with Workflows, Scheduler, and DataZone Data Notebook. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| November 18, 2025  
+Policy update - SageMakerStudioAdminIAMPermissiveExecutionPolicy| Policy updates to SageMakerStudioAdminIAMPermissiveExecutionPolicy - fix KMS permissions for integration with Workflows, Scheduler, and DataZone Data Notebook. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| November 18, 2025  
+Policy update - SageMakerStudioAdminIAMDefaultExecutionPolicy| Policy updates to SageMakerStudioAdminIAMDefaultExecutionPolicy - fix KMS permissions for integration with Workflows, Scheduler, and DataZone Data Notebook. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| November 18, 2025