AWS sagemaker-unified-studio documentation change
Summary
Added clarification about business glossary ownership and visibility, and removed statement about Git connection access permissions
Security assessment
The change clarifies access control for business glossaries (visible to all domain users but editable only by owning project members), which is security documentation about data governance. The removal of the Git connection access statement suggests previous documentation may have been inaccurate about broad access permissions, but there's no evidence of a specific security vulnerability being addressed.
Diff
diff --git a/sagemaker-unified-studio/latest/userguide/concepts.md b/sagemaker-unified-studio/latest/userguide/concepts.md index 68cced285..e38bb49f6 100644 --- a//sagemaker-unified-studio/latest/userguide/concepts.md +++ b//sagemaker-unified-studio/latest/userguide/concepts.md @@ -138 +138 @@ This is a catalog of all the published assets from various projects. The scope o -In Amazon SageMaker Unified Studio, a business glossary is a collection of business terms that may be associated with assets. A business glossary helps ensure that the same terms and definitions are used across an organization throughout its various data analytics tasks. You can add terms in a business glossary to assets and columns to classify or enhance the identification of those attributes during search. You can select glossary as the value type for a field in a metadata form that is associated with an asset. When you select a particular term as the value for an asset's metadata form field, users can search for the business glossary term and find the associated assets. +In Amazon SageMaker Unified Studio, a business glossary is a collection of business terms that may be associated with assets. A business glossary helps ensure that the same terms and definitions are used across an organization throughout its various data analytics tasks. You can add terms in a business glossary to assets and columns to classify or enhance the identification of those attributes during search. You can select glossary as the value type for a field in a metadata form that is associated with an asset. When you select a particular term as the value for an asset's metadata form field, users can search for the business glossary term and find the associated assets. Glossaries are owned by the project that creates them, but they are visible to all users in the domain. Users in any project can attach glossary terms to their assets, while only members of the owning project can edit or delete the glossary and its terms. @@ -143 +143 @@ In Amazon SageMaker Unified Studio, a business glossary is a collection of busin -Use git connections to check in and check out files and manage your code repository. When you create an Amazon SageMaker unified domain, a default git connection to CodeCommit is provided for you to manage your code. You can also create and enable new 3P Git connections to GitHub, GitHub Enterprise Server, GitLab, and GitLab Self-Managed. When you enable a Git connection, all users who can sign in to any domain in the account have read and write access to all repositories on that connection. This access applies regardless of the user's project membership or permission level. To enforce isolation between repositories, use separate AWS accounts. +Use git connections to check in and check out files and manage your code repository. When you create an Amazon SageMaker unified domain, a default git connection to CodeCommit is provided for you to manage your code. You can also create and enable new 3P Git connections to GitHub, GitHub Enterprise Server, GitLab, and GitLab Self-Managed.