AWS cli documentation change
Summary
Added new TrainingPlanArn parameter documentation for multiple app types and introduced ExecutionRoleSessionNameMode parameter with USER_IDENTITY option for session name customization.
Security assessment
The ExecutionRoleSessionNameMode addition enhances security by allowing user-specific session names for better auditing and traceability (USER_IDENTITY option), but there's no evidence this addresses a specific vulnerability. The TrainingPlanArn addition documents resource reservation without explicit security context.
Diff
diff --git a/cli/latest/reference/sagemaker/create-user-profile.md b/cli/latest/reference/sagemaker/create-user-profile.md index f132a7859..23b12915e 100644 --- a//cli/latest/reference/sagemaker/create-user-profile.md +++ b//cli/latest/reference/sagemaker/create-user-profile.md @@ -15 +15 @@ - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) » @@ -525,0 +526,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -809,0 +824,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1119,0 +1148,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1384,0 +1427,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1884,0 +1941,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2252,0 +2323,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2922,0 +3007,11 @@ JSON Syntax: +>> +>> ExecutionRoleSessionNameMode -> (string) +>> +>>> The execution role session name mode. If this value is set to `USER_IDENTITY` , the session name of the execution role corresponds to the user’s identity. For IAM domains, the session name is the IAM session name used to generate the presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user. If this value is set to `STATIC` or is not set, the session name defaults to `SageMaker` . +>>> +>>> Possible values: +>>> +>>> * `STATIC` +>>> * `USER_IDENTITY` +>>> + @@ -2955 +3050,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2971 +3067,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2989 +3086,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3002 +3100,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3054 +3153,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3081 +3181,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3151 +3252,2 @@ JSON Syntax: - ] + ], + "ExecutionRoleSessionNameMode": "STATIC"|"USER_IDENTITY" @@ -3292 +3394 @@ UserProfileArn -> (string) - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) »