AWS Security ChangesHomeSearch

AWS sagemaker documentation change

Service: sagemaker · 2026-01-10 · Documentation low

File: sagemaker/latest/dg/xgboost.md

Summary

Updated supported XGBoost versions to include 3.0-5, added compatibility warnings for GPU instances and pip version restrictions

Security assessment

Changes focus on version updates and compatibility warnings without addressing specific vulnerabilities. The pip version warning prevents potential supply chain risks but lacks evidence of addressing a specific security incident.

Diff

diff --git a/sagemaker/latest/dg/xgboost.md b/sagemaker/latest/dg/xgboost.md
index 45b244f77..daa10fc36 100644
--- a//sagemaker/latest/dg/xgboost.md
+++ b//sagemaker/latest/dg/xgboost.md
@@ -29 +29 @@ You can use the new release of the XGBoost algorithm as either:
-This implementation has a smaller memory footprint, better logging, improved hyperparameter validation, and an bigger set of metrics than the original versions. It provides an XGBoost `estimator` that runs a training script in a managed XGBoost environment. The current release of SageMaker AI XGBoost is based on the original XGBoost versions 1.0, 1.2, 1.3, 1.5, and 1.7.
+This implementation has a smaller memory footprint, better logging, improved hyperparameter validation, and an bigger set of metrics than the original versions. It provides an XGBoost `estimator` that runs a training script in a managed XGBoost environment. The current release of SageMaker AI XGBoost is based on the original XGBoost versions 1.0, 1.2, 1.3, 1.5, 1.7 and 3.0.
@@ -42 +42 @@ For more information about the Amazon SageMaker AI XGBoost algorithm, see the fo
-  * Framework (open source) mode: 1.2-1, 1.2-2, 1.3-1, 1.5-1, 1.7-1
+For more details, see our [support policy](https://docs.aws.amazon.com/sagemaker/latest/dg/pre-built-containers-support-policy.html#pre-built-containers-support-policy-ml-framework).
@@ -44 +44 @@ For more information about the Amazon SageMaker AI XGBoost algorithm, see the fo
-  * Algorithm mode: 1.2-1, 1.2-2, 1.3-1, 1.5-1, 1.7-1
+  * Framework (open source) mode: 1.2-1, 1.2-2, 1.3-1, 1.5-1, 1.7-1, 3.0-5
@@ -45,0 +46 @@ For more information about the Amazon SageMaker AI XGBoost algorithm, see the fo
+  * Algorithm mode: 1.2-1, 1.2-2, 1.3-1, 1.5-1, 1.7-1, 3.0-5
@@ -48,0 +50,9 @@ For more information about the Amazon SageMaker AI XGBoost algorithm, see the fo
+
+###### Warning
+
+Due to required compute capacity, version 3.0-5 of SageMaker AI XGBoost is not compatible with GPU instances from the P3 instance family for training or inference.
+
+###### Warning
+
+Due to package compatible, version 3.0-5 of SageMaker AI XGBoost does not support SageMaker debugger.
+
@@ -52,0 +63,4 @@ Due to required compute capacity, version 1.7-1 of SageMaker AI XGBoost is not c
+###### Warning
+
+Network Isolation Mode: Do not upgrade pip beyond version 25.2. Newer versions may attempt to fetch setuptools from PyPI during module installation.
+
@@ -101,0 +116,2 @@ SageMaker AI XGBoost version 1.7-1 or later supports P3, G4dn, and G5 GPU instan
+SageMaker AI XGBoost version 3.0-5 or later supports G4dn and G5 GPU instance families. Note that due to compute capacity requirements, version 3.0-5 or later does not support the P3 instance family.
+
@@ -104 +120 @@ To take advantage of GPU training:
-  * Specify the instance type as one of the GPU instances (for example, P3) 
+  * Specify the instance type as one of the GPU instances (for example, G4dn)