AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-16 · Documentation low

File: cli/latest/reference/sagemaker/describe-domain.md

Summary

Added TrainingPlanArn field documentation for reserving GPU capacity through AI Training Plans and ExecutionRoleSessionNameMode field for session name configuration

Security assessment

The change adds documentation for ExecutionRoleSessionNameMode which controls session name attribution for audit trails. This improves security auditing capabilities by enabling user-specific session names, but doesn't fix any existing vulnerability. The TrainingPlanArn addition is a feature enhancement without security implications.

Diff

diff --git a/cli/latest/reference/sagemaker/describe-domain.md b/cli/latest/reference/sagemaker/describe-domain.md
index 53246cd32..37009b6f9 100644
--- a//cli/latest/reference/sagemaker/describe-domain.md
+++ b//cli/latest/reference/sagemaker/describe-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.48 Command Reference](../../index.html) »
@@ -663,0 +664,14 @@ DefaultUserSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -947,0 +962,14 @@ DefaultUserSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -1257,0 +1286,14 @@ DefaultUserSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -1522,0 +1565,14 @@ DefaultUserSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -2022,0 +2079,14 @@ DefaultUserSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -2390,0 +2461,14 @@ DefaultUserSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -3060,0 +3145,11 @@ DefaultUserSettings -> (structure)
+>> 
+>> ExecutionRoleSessionNameMode -> (string)
+>>
+>>> The execution role session name mode. If this value is set to `USER_IDENTITY` , the session name of the execution role corresponds to the user’s identity. For IAM domains, the session name is the IAM session name used to generate the presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user. If this value is set to `STATIC` or is not set, the session name defaults to `SageMaker` .
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `STATIC`
+>>>   * `USER_IDENTITY`
+>>> 
+
@@ -3358,0 +3454,14 @@ DomainSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -3954,0 +4064,14 @@ DefaultSpaceSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -4238,0 +4362,14 @@ DefaultSpaceSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -4552,0 +4690,14 @@ DefaultSpaceSettings -> (structure)
+>>> 
+>>> TrainingPlanArn -> (string)
+>>>
+>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types.
+>>>> 
+>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)`
+>>>> 
+
@@ -4922 +5073 @@ DefaultSpaceSettings -> (structure)
-  * [AWS CLI 2.34.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.48 Command Reference](../../index.html) »