AWS sagemaker documentation change
Summary
Added a note clarifying that the execution role requires 'sagemaker:DescribeAlgorithm' permission when using an algorithm resource for training jobs.
Security assessment
This change adds documentation about required IAM permissions for using algorithm resources, which is a security best practice but does not indicate a specific security vulnerability being addressed.
Diff
diff --git a/sagemaker/latest/dg/sagemaker-mkt-algo-train.md b/sagemaker/latest/dg/sagemaker-mkt-algo-train.md index c716475e0..4db59470a 100644 --- a//sagemaker/latest/dg/sagemaker-mkt-algo-train.md +++ b//sagemaker/latest/dg/sagemaker-mkt-algo-train.md @@ -10,0 +11,4 @@ You can create use an algorithm resource to create a training job by using the A +###### Note + +Your execution role must have `sagemaker:DescribeAlgorithm` permission for the algorithm resource that you specify. For more information about execution role permissions, see [CreateTrainingJob API: Execution Role Permissions](./sagemaker-roles.html#sagemaker-roles-createtrainingjob-perms). +