AWS AWSCloudFormation documentation change
Summary
Enhanced documentation for SageMaker Cluster properties including autoscaling configuration, IAM role requirements, provisioning modes, and checkpointing features
Security assessment
While the changes add security-relevant documentation about required IAM permissions (sagemaker:BatchAddClusterNodes and sagemaker:BatchDeleteClusterNodes), there is no evidence this addresses a specific security vulnerability. The updates primarily improve operational documentation rather than patching security issues.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-cluster.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-cluster.md index f79f290b4..9a1f7bcea 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-cluster.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-cluster.md @@ -66 +66 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The autoscaling configuration for the cluster. Enables automatic scaling of cluster nodes based on workload demand using a Karpenter-based system. @@ -94 +94 @@ _Minimum_ : `1` -Property description not available. +The Amazon Resource Name (ARN) of the IAM role that HyperPod assumes to perform cluster autoscaling operations. This role must have permissions for `sagemaker:BatchAddClusterNodes` and `sagemaker:BatchDeleteClusterNodes`. This is only required when autoscaling is enabled and when HyperPod is performing autoscaling operations. @@ -124 +124,6 @@ _Required_ : No -Property description not available. +The mode for provisioning nodes in the cluster. You can specify the following modes: + + * **Continuous** : Scaling behavior that enables 1) concurrent operation execution within instance groups, 2) continuous retry mechanisms for failed operations, 3) enhanced customer visibility into cluster events through detailed event streams, 4) partial provisioning capabilities. Your clusters and instance groups remain `InService` while scaling. This mode is only supported for EKS orchestrated clusters. + + + @@ -161 +166 @@ _Required_ : No -Property description not available. +The specialized instance groups for training models like Amazon Nova to be created in the SageMaker HyperPod cluster. @@ -191 +196 @@ _Required_ : No -Property description not available. +The configuration for managed tier checkpointing on the HyperPod cluster. When enabled, this feature uses a multi-tier storage approach for storing model checkpoints, providing faster checkpoint operations and improved fault tolerance across cluster nodes. @@ -215,0 +221,4 @@ _Required_ : No +The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values. + +For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html). +