AWS Security ChangesHomeSearch

AWS sagemaker documentation change

Service: sagemaker · 2025-11-28 · Documentation low

File: sagemaker/latest/dg/sagemaker-hyperpod-eks-operate-cli-command-create-cluster.md

Summary

Added critical warning about AZ ID matching for On-Demand Capacity Reservations to prevent duplicate charges

Security assessment

Addresses cost optimization rather than security. The warning focuses on financial implications, not security vulnerabilities or protections.

Diff

diff --git a/sagemaker/latest/dg/sagemaker-hyperpod-eks-operate-cli-command-create-cluster.md b/sagemaker/latest/dg/sagemaker-hyperpod-eks-operate-cli-command-create-cluster.md
index df7a1b86a..f84c6372f 100644
--- a//sagemaker/latest/dg/sagemaker-hyperpod-eks-operate-cli-command-create-cluster.md
+++ b//sagemaker/latest/dg/sagemaker-hyperpod-eks-operate-cli-command-create-cluster.md
@@ -161,0 +162,6 @@ Removing a RIG will not delete any artifacts stored in the service-managed Amazo
+###### Important
+
+When using an onboarded On-Demand Capacity Reservation (ODCR), you must map your instance group to the same Availability Zone ID (AZ ID) as the ODCR by setting `OverrideVpcConfig` with a subnet in the matching AZ ID.
+
+CRITICAL: Verify `OverrideVpcConfig` configuration before deployment to avoid incurring duplicate charges for both ODCR and On-Demand Capacity.
+