AWS AWSCloudFormation documentation change
Summary
Added detailed property descriptions for MLflow Tracking Server configuration, including artifact store URI, automatic model registration, MLflow version, IAM role requirements, tags, server size recommendations, maintenance window, and attributes.
Security assessment
The change adds documentation about required IAM roles with `AmazonS3FullAccess` permissions and references IAM setup guidelines, which relates to security best practices but does not address a specific vulnerability or incident.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-mlflowtrackingserver.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-mlflowtrackingserver.md index 76bd7f28b..d1de9e8c4 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-mlflowtrackingserver.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-mlflowtrackingserver.md @@ -54 +54 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The S3 URI for a general purpose bucket to use as the MLflow Tracking Server artifact store. @@ -71 +71 @@ _Minimum_ : `1` -Property description not available. +Whether to enable or disable automatic registration of new MLflow models to the SageMaker Model Registry. To enable automatic model registration, set this value to `True`. To disable automatic model registration, set this value to `False`. If not specified, `AutomaticModelRegistration` defaults to `False`. @@ -82 +82 @@ _Required_ : No -Property description not available. +The version of MLflow that the tracking server uses. To see which MLflow versions are available to use, see [How it works](https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow.html#mlflow-create-tracking-server-how-it-works). @@ -99 +99 @@ _Minimum_ : `1` -Property description not available. +The Amazon Resource Name (ARN) for an IAM role in your account that the MLflow Tracking Server uses to access the artifact store in Amazon S3. The role should have `AmazonS3FullAccess` permissions. For more information on IAM permissions for tracking server creation, see [Set up IAM permissions for MLflow](https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow-create-tracking-server-iam.html). @@ -116 +116 @@ _Minimum_ : `20` -Property description not available. +Tags consisting of key-value pairs used to manage metadata for the tracking server. @@ -131 +131 @@ _Required_ : No -Property description not available. +A unique string identifying the tracking server name. This string is part of the tracking server ARN. @@ -148 +148,3 @@ _Minimum_ : `1` -Property description not available. +The size of the tracking server you want to create. You can choose between `"Small"`, `"Medium"`, and `"Large"`. The default MLflow Tracking Server configuration size is `"Small"`. You can choose a size depending on the projected use of the tracking server such as the volume of data logged, number of users, and frequency of use. + +We recommend using a small tracking server for teams of up to 25 users, a medium tracking server for teams of up to 50 users, and a large tracking server for teams of up to 100 users. @@ -161 +163 @@ _Required_ : No -Property description not available. +The day and time of the week in Coordinated Universal Time (UTC) 24-hour standard time that weekly maintenance updates are scheduled. For example: TUE:03:30. @@ -178,0 +181,4 @@ _Maximum_ : `9` +The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values. + +For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html). + @@ -184 +190 @@ _Maximum_ : `9` -Property description not available. +The ARN of the tracking server.