AWS sagemaker-unified-studio documentation change
Summary
Added two entries to document history for policy updates: SageMakerStudioUserIAMConsolePolicy (adding datazone permissions) and SageMakerStudioProjectUserRolePolicy (adding AWS Glue permissions for S3 Tables).
Security assessment
These are routine policy updates to support new features (IAM role federation in Local IDE and querying S3 Tables). No evidence of addressing a security vulnerability or incident.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/doc-history.md b/sagemaker-unified-studio/latest/adminguide/doc-history.md index 575d1d78b..25d2207f2 100644 --- a//sagemaker-unified-studio/latest/adminguide/doc-history.md +++ b//sagemaker-unified-studio/latest/adminguide/doc-history.md @@ -10,0 +11 @@ Change| Description| Date +Policy update - SageMakerStudioUserIAMConsolePolicy| Policy updates to SageMakerStudioUserIAMConsolePolicy - adding permissions for `datazone:GetConnection` and `datazone:ListConnections` to support IAM role federation in Local IDE. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| March 31, 2026 @@ -16,0 +18 @@ Policy update - SageMakerStudioAdminIAMConsolePolicy| Policy updates to SageMak +Policy update - SageMakerStudioProjectUserRolePolicy| Policy updates to SageMakerStudioProjectUserRolePolicy - adding AWS Glue permissions scoped to S3 Tables catalog resource to support querying S3 Tables from SageMaker Unified Studio IdC domains. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| March 24, 2026