AWS sagemaker-unified-studio documentation change
Summary
Updated role descriptions to include SSO credentials, clarified project member requirements, and rephrased access management details
Security assessment
Changes document SSO credential support and refine IAM role requirements without evidence of vulnerability remediation. The updates enhance security documentation by clarifying authentication methods and access controls.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/projects-iam-based-domains.md b/sagemaker-unified-studio/latest/adminguide/projects-iam-based-domains.md index 41d882be4..8c97423c9 100644 --- a//sagemaker-unified-studio/latest/adminguide/projects-iam-based-domains.md +++ b//sagemaker-unified-studio/latest/adminguide/projects-iam-based-domains.md @@ -9 +9 @@ -Projects in IAM-based domains provide isolated environments for data analytics and AI/ML development work. Each project has one IAM role for login, one IAM role for accessing data and resources, and storage configurations that determine what resources and data project members can access from within the project. All members for a project within an IAM-based domain have the same access to data and compute, this is managed through the execution IAM role for the project. +Projects in IAM-based domains provide isolated environments for data analytics and AI/ML development work. Each project has one IAM role for accessing data and resources, IAM and SSO credentials for login, and storage configurations. These configurations determine what resources and data project members can access from within the project. All members of a project within an IAM-based domain have the same access to data and compute. This access is managed through the execution IAM role for the project. @@ -20 +20 @@ Projects can be created in the following ways: -Projects within IAM-based domains require two IAM roles: +Projects within IAM-based domains require a project member and an Execution IAM role: @@ -22 +22 @@ Projects within IAM-based domains require two IAM roles: - * **Member IAM role or user** – Authenticates users and provides access to the Amazon SageMaker Unified Studio project. This role or user must have the SageMakerStudioUserIAMConsolePolicy managed policy attached, or equivalent permissions through another policy. Use this role to access your assigned project from the Amazon SageMaker Unified Studio interface. + * **Project member** – An IAM role or user that provides access to the Amazon SageMaker Unified Studio project. For IAM, the role or user must have the SageMakerStudioUserIAMConsolePolicy managed policy attached, or equivalent permissions through another policy. Log in to Amazon SageMaker Unified Studio to view the projects that you have access to.