AWS braket documentation change

Service: braket · 2026-02-16 · Documentation low

File: braket/latest/developerguide/restrict-access-notebook-instances.md

Summary

Added a JSON IAM policy example for restricting SageMaker notebook access in Braket.

Security assessment

The change adds a deny policy example for access control, which is security documentation. No evidence of patching a specific security issue.

Diff

diff --git a/braket/latest/developerguide/restrict-access-notebook-instances.md b/braket/latest/developerguide/restrict-access-notebook-instances.md
index 79ae31e9d..6472e331c 100644
--- a//braket/latest/developerguide/restrict-access-notebook-instances.md
+++ b//braket/latest/developerguide/restrict-access-notebook-instances.md
@@ -10,0 +11,49 @@ The following example uses [policy variables](https://docs.aws.amazon.com/IAM/la
+JSON
+    
+
+****
+    
+    
+    
+    {
+      "Version":"2012-10-17",		 	 	 
+      "Statement": [
+        {
+          "Sid": "DenyCreateDeleteUpdateNotebookInstances",
+          "Effect": "Deny",
+          "Action": [
+            "sagemaker:CreateNotebookInstance",
+            "sagemaker:DeleteNotebookInstance",
+            "sagemaker:UpdateNotebookInstance",
+            "sagemaker:CreateNotebookInstanceLifecycleConfig",
+            "sagemaker:DeleteNotebookInstanceLifecycleConfig",
+            "sagemaker:UpdateNotebookInstanceLifecycleConfig"
+          ],
+          "Resource": "*"
+        },
+        {
+          "Sid": "DenyDescribeStartStopNotebookInstances",
+          "Effect": "Deny",
+          "Action": [
+            "sagemaker:DescribeNotebookInstance",
+            "sagemaker:StartNotebookInstance",
+            "sagemaker:StopNotebookInstance"
+          ],
+          "NotResource": [
+            "arn:aws:sagemaker:*:123456789012:notebook-instance/amazon-braket-${aws:username}"
+          ]
+        },
+        {
+          "Sid": "DenyNotebookInstanceUrl",
+          "Effect": "Deny",
+          "Action": [
+            "sagemaker:CreatePresignedNotebookInstanceUrl"
+          ],
+          "NotResource": [
+            "arn:aws:sagemaker:*:123456789012:notebook-instance/amazon-braket-${aws:username}*"
+          ]
+        }
+      ]
+    }
+    
+