AWS Security ChangesHomeSearch

AWS sagemaker documentation change

Service: sagemaker · 2026-03-25 · Documentation low

File: sagemaker/latest/dg/sagemaker-mkt-algo-train.md

Summary

Added a note clarifying that the execution role requires 'sagemaker:DescribeAlgorithm' permission when using an algorithm resource for training jobs.

Security assessment

This change adds documentation about required IAM permissions for using algorithm resources, which is a security best practice but does not indicate a specific security vulnerability being addressed.

Diff

diff --git a/sagemaker/latest/dg/sagemaker-mkt-algo-train.md b/sagemaker/latest/dg/sagemaker-mkt-algo-train.md
index c716475e0..4db59470a 100644
--- a//sagemaker/latest/dg/sagemaker-mkt-algo-train.md
+++ b//sagemaker/latest/dg/sagemaker-mkt-algo-train.md
@@ -10,0 +11,4 @@ You can create use an algorithm resource to create a training job by using the A
+###### Note
+
+Your execution role must have `sagemaker:DescribeAlgorithm` permission for the algorithm resource that you specify. For more information about execution role permissions, see [CreateTrainingJob API: Execution Role Permissions](./sagemaker-roles.html#sagemaker-roles-createtrainingjob-perms).
+