AWS Security ChangesHomeSearch

AWS sagemaker-unified-studio documentation change

Service: sagemaker-unified-studio · 2025-11-22 · Documentation low

File: sagemaker-unified-studio/latest/userguide/workflow-orchestration.md

Summary

Updated workflow documentation to distinguish between IDC-based and IAM-based domains, emphasizing federated role access for IAM-based domains

Security assessment

Highlights IAM-based domain authentication through federated roles, which is a security feature, but does not indicate resolution of any security vulnerability. The changes primarily clarify access methods rather than address exploits.

Diff

diff --git a/sagemaker-unified-studio/latest/userguide/workflow-orchestration.md b/sagemaker-unified-studio/latest/userguide/workflow-orchestration.md
index 23ba4f6b0..f0d129508 100644
--- a//sagemaker-unified-studio/latest/userguide/workflow-orchestration.md
+++ b//sagemaker-unified-studio/latest/userguide/workflow-orchestration.md
@@ -7 +7 @@
-With a Amazon SageMaker Unified Studio workflow, you can set up and run a series of tasks in Amazon SageMaker Unified Studio. Amazon SageMaker Unified Studio workflows use Apache Airflow to model data processing procedures and orchestrate your Amazon SageMaker Unified Studio code artifacts. Go to the **Workflows** page of a project in Amazon SageMaker Unified Studio to create workflows in Python code, run them, and review logs.
+Amazon SageMaker Unified Studio provides workflow capabilities that allow you to set up and run a series of tasks to orchestrate your data processing procedures. Workflows use Apache Airflow to model data processing procedures and orchestrate your Amazon SageMaker Unified Studio code artifacts.
@@ -9 +9 @@ With a Amazon SageMaker Unified Studio workflow, you can set up and run a series
-###### Note
+Amazon SageMaker Unified Studio supports workflows in two domain types:
@@ -11 +11 @@ With a Amazon SageMaker Unified Studio workflow, you can set up and run a series
-Workflows are available in Amazon SageMaker Unified Studio projects created with the **All capabilities** project profile.
+  * **IDC-based domains** \- The original Amazon SageMaker Unified Studio interface that provides comprehensive workflow capabilities including visual workflows, code workflows, and workflow environments.
@@ -13 +13 @@ Workflows are available in Amazon SageMaker Unified Studio projects created with
-To use workflows in Amazon SageMaker Unified Studio, you must provision an instance of at least 4GB memory and 4vCPUs.
+  * **IAM-based domains** \- A new domain type that provides workflow capabilities through federated role access with existing IAM permissions.
@@ -15 +14,0 @@ To use workflows in Amazon SageMaker Unified Studio, you must provision an insta
-There are two compute spaces that you can use for workflows in your project:
@@ -17 +15,0 @@ There are two compute spaces that you can use for workflows in your project:
-  * **Local space**. Only you can view and edit the workflows in your local space.
@@ -19 +16,0 @@ There are two compute spaces that you can use for workflows in your project:
-  * **Shared environment**. Everyone in the project sees and accesses the files in the shared environment.
@@ -21,4 +18 @@ There are two compute spaces that you can use for workflows in your project:
-
-
-
-Each workflow that you create starts in your local space as a file. To share your workflows with other users, commit the file defining your workflow and sync the workflow with a shared environment.
+The workflow experience and available features may differ between domain types. Choose the appropriate section below based on your domain type to access the relevant documentation.
@@ -34 +28 @@ Schedule a query
-Visual Workflows
+IDC-based domain workflows