AWS sagemaker documentation change
Summary
Specified that IAM session names originate from Studio presigned URLs
Security assessment
Minor clarification about authentication mechanism without security implications. Doesn't address vulnerabilities or document new security features.
Diff
diff --git a/sagemaker/latest/dg/execution-roles-and-spaces.md b/sagemaker/latest/dg/execution-roles-and-spaces.md index 41a397d72..91d4c1dcd 100644 --- a//sagemaker/latest/dg/execution-roles-and-spaces.md +++ b//sagemaker/latest/dg/execution-roles-and-spaces.md @@ -108 +108 @@ USER_IDENTITY -The session name of the execution role corresponds to the user's identity. For IAM domains, the session name is the IAM session name used to generate the presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user. +The session name of the execution role corresponds to the user's identity. For IAM domains, the session name is the IAM session name used to generate the Studio presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user.