AWS cli documentation change
Summary
Added documentation for TrainingPlanArn field under UserSettings structure and updated AWS CLI version references. TrainingPlanArn specifies the ARN for SageMaker AI Training Plans to reserve GPU capacity for Studio applications. Also added ExecutionRoleSessionNameMode field to control execution role session naming.
Security assessment
The change adds documentation for ExecutionRoleSessionNameMode which enables user identity-based session names for execution roles. This improves audit trails and access tracking (security feature), but doesn't fix a specific vulnerability. TrainingPlanArn documentation describes resource reservation without security implications.
Diff
diff --git a/cli/latest/reference/sagemaker/describe-user-profile.md b/cli/latest/reference/sagemaker/describe-user-profile.md index 7af503d3a..e8fd34d5f 100644 --- a//cli/latest/reference/sagemaker/describe-user-profile.md +++ b//cli/latest/reference/sagemaker/describe-user-profile.md @@ -15 +15 @@ - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) » @@ -654,0 +655,14 @@ UserSettings -> (structure) +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -938,0 +953,14 @@ UserSettings -> (structure) +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1248,0 +1277,14 @@ UserSettings -> (structure) +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1513,0 +1556,14 @@ UserSettings -> (structure) +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2013,0 +2070,14 @@ UserSettings -> (structure) +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2381,0 +2452,14 @@ UserSettings -> (structure) +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -3051,0 +3136,11 @@ UserSettings -> (structure) +>> +>> ExecutionRoleSessionNameMode -> (string) +>> +>>> The execution role session name mode. If this value is set to `USER_IDENTITY` , the session name of the execution role corresponds to the user’s identity. For IAM domains, the session name is the IAM session name used to generate the presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user. If this value is set to `STATIC` or is not set, the session name defaults to `SageMaker` . +>>> +>>> Possible values: +>>> +>>> * `STATIC` +>>> * `USER_IDENTITY` +>>> + @@ -3077 +3172 @@ UserSettings -> (structure) - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) »