AWS sagemaker-unified-studio documentation change
Summary
Restructured domain documentation to differentiate Identity Center-based and IAM-based domains, emphasizing authentication methods and access control approaches
Security assessment
The changes explicitly document security features by comparing authentication mechanisms (IAM Identity Center SSO vs IAM roles) and their security implications. This enhances security documentation but doesn't address a specific vulnerability.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/working-with-domains.md b/sagemaker-unified-studio/latest/adminguide/working-with-domains.md index c336e67f7..11f8ed1da 100644 --- a//sagemaker-unified-studio/latest/adminguide/working-with-domains.md +++ b//sagemaker-unified-studio/latest/adminguide/working-with-domains.md @@ -7 +7 @@ -In Amazon SageMaker Unified Studio, a domain is the organizing entity for connecting together your assets, users, and their projects. With Amazon SageMaker unified domains, you have the flexibility to reflect the data and analytics needs of your organizational structure, whether it's creating a single Amazon SageMaker unified domain for your enterprise or multiple domains for different business units. This section describes how you can create and manage domains using the Amazon SageMaker management console. +In Amazon SageMaker Unified Studio, a domain is the organizing entity for connecting together your assets, users, and their projects. With Amazon SageMaker unified domains, you have the flexibility to reflect the data and analytics needs of your organizational structure, whether it's creating a single Amazon SageMaker unified domain for your enterprise or multiple domains for different business units. @@ -9 +9 @@ In Amazon SageMaker Unified Studio, a domain is the organizing entity for connec -You can use the Amazon SageMaker management console to create either Amazon SageMaker unified domains or Amazon DataZone domains. For the Amazon SageMaker unified domains, you can choose either the **Quick setup** or the **Manual setup** options. Once your domain is created, you can navigate to the Amazon SageMaker Unified Studio (a browser-based web application) where you can use all your data and configured tools for analytics and AI. +Amazon SageMaker Unified Studio supports two distinct domain types to accommodate different organizational needs and authentication approaches: @@ -11 +11,3 @@ You can use the Amazon SageMaker management console to create either Amazon Sage -###### Topics + * **Identity Center-based domains** \- Use AWS IAM Identity Center for user authentication and management. These domains support single sign-on (SSO) through identity providers and provide centralized user management capabilities. You can create these domains using either quick setup or manual setup options through the Amazon SageMaker management console. + + * **IAM-based domains** \- Use AWS Identity and Access Management (IAM) roles for authentication and access control. These domains provide an additional path to setup and manage your data and AI development environment using federated IAM roles for login and execution. Only one IAM-based domain is available per AWS Account. @@ -13 +14,0 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Create a Amazon SageMaker Unified Studio domain - quick setup](./create-domain-sagemaker-unified-studio-quick.html) @@ -15 +15,0 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Create a Amazon SageMaker Unified Studio domain - manual setup](./create-domain-sagemaker-unified-studio-manual.html) @@ -17 +16,0 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Create an Amazon DataZone domain](./create-domain-datazone.html) @@ -19 +18 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Edit domains](./edit-domain.html) +Both domain types provide access to the same core Amazon SageMaker Unified Studio capabilities for data analytics, machine learning, and AI development, but use different authentication mechanisms and setup processes. Choose the domain type that best fits your organization's identity management strategy and security requirements. @@ -21 +20 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Delete domains](./delete-domain.html) +###### Topics @@ -23 +22 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Upgrade Amazon DataZone domains to Amazon SageMaker unified domains](./upgrade-domain.html) + * [Identity Center-based domains](./identity-center-based-domains.html) @@ -25 +24 @@ You can use the Amazon SageMaker management console to create either Amazon Sage - * [Trusted identity propagation](./trusted-identity-propagation.html) + * [IAM-based domains and projects](./iam-based-domains.html) @@ -38 +37 @@ Supported Regions -Create a Amazon SageMaker Unified Studio domain - quick setup +Identity Center-based domains