AWS cli documentation change
Summary
Added TrainingPlanArn parameter for GPU capacity reservation and ExecutionRoleSessionNameMode parameter for execution role session name configuration
Security assessment
The change adds documentation for ExecutionRoleSessionNameMode which controls session name generation for execution roles. This enhances auditability by allowing session names to reflect user identities, improving security traceability. However, there's no evidence this addresses a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/sagemaker/update-user-profile.md b/cli/latest/reference/sagemaker/update-user-profile.md index 198a8f496..4925e6ff4 100644 --- a//cli/latest/reference/sagemaker/update-user-profile.md +++ b//cli/latest/reference/sagemaker/update-user-profile.md @@ -15 +15 @@ - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) » @@ -438,0 +439,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -722,0 +737,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1032,0 +1061,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1297,0 +1340,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1797,0 +1854,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2165,0 +2236,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2835,0 +2920,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>> +>> ExecutionRoleSessionNameMode -> (string) +>> +>>> The execution role session name mode. If this value is set to `USER_IDENTITY` , the session name of the execution role corresponds to the user’s identity. For IAM domains, the session name is the IAM session name used to generate the presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user. If this value is set to `STATIC` or is not set, the session name defaults to `SageMaker` . +>>> +>>> Possible values: +>>> +>>> * `STATIC` +>>> * `USER_IDENTITY` +>>> + @@ -2868 +2963,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2884 +2980,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2902 +2999,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2915 +3013,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2967 +3066,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2994 +3094,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3064 +3165,2 @@ JSON Syntax: - ] + ], + "ExecutionRoleSessionNameMode": "STATIC"|"USER_IDENTITY" @@ -3205 +3307 @@ UserProfileArn -> (string) - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) »