AWS sagemaker-unified-studio documentation change
Summary
Updated documentation to clarify notebook availability in IAM and IAM Identity Center domains, added VPC limitations for Amazon Athena for Apache Spark, updated feature list formatting and content, and added network isolation guidance.
Security assessment
The change adds documentation about network isolation and VPC configuration for notebooks, which are security features for controlling network access. Specifically mentions running notebook kernels in domain-level VPC configuration for network isolation and references the network isolation admin guide. However, there is no evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/sagemaker-unified-studio/latest/userguide/notebooks.md b/sagemaker-unified-studio/latest/userguide/notebooks.md index 7cc7a8eb4..423bffb56 100644 --- a//sagemaker-unified-studio/latest/userguide/notebooks.md +++ b//sagemaker-unified-studio/latest/userguide/notebooks.md @@ -14,0 +15,2 @@ Notebooks in Amazon SageMaker Unified Studio provide an interactive environment +You can use notebooks in both IAM-based and IAM Identity Center-based domains. + @@ -23,3 +25 @@ The notebook interface integrates with AI assistance through SageMaker Data Agen -SageMaker notebooks are only available in IAM-based domains. - -###### Note +Amazon Athena for Apache Spark doesn't support Virtual Private Cloud (VPC). If you require VPC connectivity for your workloads, use Spark on Amazon EMR or AWS Glue instead. For instructions on disabling Amazon Athena Spark, see [Network isolation](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/network-isolation.html) in the _Amazon SageMaker Unified Studio Admin Guide_. @@ -27 +27 @@ SageMaker notebooks are only available in IAM-based domains. -SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab spaces. +For more information about configuring VPC and network isolation for your domain, see [Network isolation](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/network-isolation.html) in the _Amazon SageMaker Unified Studio Admin Guide_. @@ -31 +31,3 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 1. Execute Python, Spark, and SQL code in interactive cells + * Execute Python, Spark, and SQL code in interactive cells + + * Integrate with Amazon Athena for Apache Spark for distributed processing @@ -33 +35 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 2. Integrate with Amazon Athena for Apache Spark for distributed processing + * Connect to multiple data sources including Amazon Simple Storage Service, Amazon S3 Tables, AWS Glue Data Catalog, Amazon Athena, and Amazon Redshift. For a complete list of supported sources, see [Supported data connections](https://docs.aws.amazon.com/sagemaker-lakehouse-architecture/latest/userguide/lakehouse-data-connection.html#lakehouse-data-connection-supported). @@ -35 +37 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 3. Connect to multiple data sources including Amazon Simple Storage Service, Amazon S3 Tables, AWS Glue Data Catalog, Amazon Athena, and Amazon Redshift. List of supported sources can be found [here](https://docs.aws.amazon.com/sagemaker-lakehouse-architecture/latest/userguide/lakehouse-data-connection.html#lakehouse-data-connection-supported). + * Work with Apache Iceberg REST Catalogs to read and write Iceberg tables by using Iceberg REST APIs in Python and SQL @@ -37 +39 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 4. Work with Apache Iceberg REST Catalogs located anywhere to read/write Iceberg tables using Iceberg REST APIs in Python/SQL. + * Visualize data with interactive tables and charts @@ -39 +41 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 5. Visualize data with interactive tables and charts + * Use auto code completion, formatting, and linting in the cell editor @@ -41 +43 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 6. Auto code completion, formatting, linting supported in Cell editor + * Use AI assistance for code generation and error diagnosis @@ -43 +45 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 7. Use AI assistance for code generation and error diagnosis + * Manage compute environments with configurable instance types @@ -45 +47 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 8. Manage compute environments with configurable instance types + * Export notebooks in multiple formats including Jupyter and Python files @@ -47 +49 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 9. Export notebooks in multiple formats including Jupyter, and Python files + * Install and manage Python packages @@ -49 +51 @@ SageMaker Notebooks do not support VPC. For VPC support, you can use JupyterLab - 10. Install and manage Python packages + * Run notebook kernels in your domain-level VPC configuration for network isolation @@ -58 +60 @@ To use notebooks in Amazon SageMaker Unified Studio, you need: - 1. Access to an Amazon SageMaker Unified Studio domain + * Access to an Amazon SageMaker Unified Studio domain @@ -60 +62 @@ To use notebooks in Amazon SageMaker Unified Studio, you need: - 2. Appropriate IAM permissions to access data sources + * Appropriate IAM permissions to access data sources @@ -62 +64 @@ To use notebooks in Amazon SageMaker Unified Studio, you need: - 3. Project membership with notebook creation permissions + * Project membership with notebook creation permissions