AWS sagemaker-unified-studio documentation change
Summary
Clarified terminology from 'SSO user' to 'single sign-on user' and added a note about IAM Identity Center multi-Region support requiring an external identity provider.
Security assessment
The change provides informational updates on identity management features, including multi-Region support, but no concrete evidence of a security issue is present; it adds documentation about security-related identity features.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/create-domain-sagemaker-unified-studio-quick.md b/sagemaker-unified-studio/latest/adminguide/create-domain-sagemaker-unified-studio-quick.md index 1b505a2dd..7b1de0ddc 100644 --- a//sagemaker-unified-studio/latest/adminguide/create-domain-sagemaker-unified-studio-quick.md +++ b//sagemaker-unified-studio/latest/adminguide/create-domain-sagemaker-unified-studio-quick.md @@ -45 +45,5 @@ If you see the following note **No models accessible** , you can use the **Grant - 6. On the**Create IAM Identity Center user** page, create an SSO user (account with IAM Identity Center) or select an existing SSO user to log in to the Amazon SageMaker Unified Studio. IAM roles that create the Amazon SageMaker unified domains cannot log in to the Amazon SageMaker Unified Studio. The SSO selected here is used as the administrator in the Amazon SageMaker Unified Studio. + 6. On the**Create IAM Identity Center user** page, create a single sign-on user (account with IAM Identity Center) or select an existing single sign-on user to log in to the Amazon SageMaker Unified Studio. IAM roles that create the Amazon SageMaker unified domains cannot log in to the Amazon SageMaker Unified Studio. The single sign-on user selected here is used as the administrator in the Amazon SageMaker Unified Studio. + +###### Note + +The Amazon SageMaker domain can reside in a different AWS Region than where the IAM Identity Center organization instance is located using IAM Identity Center multi-Region support. To use this feature, your IAM Identity Center instance must be connected to an external identity provider (IdP). For information about setting up IAM Identity Center multi-Region, see [Using IAM Identity Center across multiple AWS Regions](https://docs.aws.amazon.com/singlesignon/latest/userguide/multi-region-iam-identity-center.html).