AWS sagemaker-unified-studio medium security documentation change
Summary
Added policy update entries for May 2026 documenting new permissions for EMR, MWAA, Glue, and CloudFormation integrations.
Security assessment
Documents expanded IAM permissions across multiple execution policies. Security impact: Properly configuring these permissions is critical for least-privilege access. Concrete evidence: Multiple policy updates explicitly listed with new service integrations.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/doc-history.md b/sagemaker-unified-studio/latest/adminguide/doc-history.md index f059a696d..5d372a2d1 100644 --- a//sagemaker-unified-studio/latest/adminguide/doc-history.md +++ b//sagemaker-unified-studio/latest/adminguide/doc-history.md @@ -12,0 +13,6 @@ Change| Description| Date +Policy update - SageMakerStudioUserIAMPermissiveExecutionPolicy| Policy updates to SageMakerStudioUserIAMPermissiveExecutionPolicy - adding permissions to support integration with Amazon EMR Serverless Spark Connect in DataZone Data Notebook. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| May 11, 2026 +Policy update - SageMakerStudioUserIAMDefaultExecutionPolicy| Policy updates to SageMakerStudioUserIAMDefaultExecutionPolicy - adding permissions to support integration with multiple services including Amazon EMR Serverless Spark Connect in DataZone Data Notebook, Amazon Managed Workflows for Apache Airflow (MWAA) environments, and AWS Glue Data Quality. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| May 11, 2026 +Policy update - SageMakerStudioProjectUserRolePolicy| Policy updates to SageMakerStudioProjectUserRolePolicy - adding permissions to support integration with AWS Glue Data Quality. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| May 11, 2026 +Policy update - SageMakerStudioAdminIAMPermissiveExecutionPolicy| Policy updates to SageMakerStudioAdminIAMPermissiveExecutionPolicy - adding permissions to support integration with multiple services including Amazon EMR Serverless Spark Connect in DataZone Data Notebook, Amazon Managed Workflows for Apache Airflow (MWAA) environments, and AWS Resource Access Manager. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| May 11, 2026 +Policy update - SageMakerStudioAdminIAMDefaultExecutionPolicy| Policy updates to SageMakerStudioAdminIAMDefaultExecutionPolicy - adding permissions to support integration with multiple services including Amazon EMR Serverless Spark Connect in DataZone Data Notebook, Amazon Managed Workflows for Apache Airflow (MWAA) environments, AWS Glue Data Quality, and AWS Resource Access Manager. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| May 11, 2026 +Policy update - SageMakerStudioProjectProvisioningRolePolicy| Policy updates to SageMakerStudioProjectProvisioningRolePolicy - adding permissions to support integration of CloudFormation LanguageExtensions transform and admin project IAM policy attachment. For more information, see [Amazon SageMaker Unified Studio updates to AWS managed policies](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol.html).| May 6, 2026