AWS sagemaker-unified-studio documentation change
Summary
Added documentation about IAM role handling during project creation
Security assessment
Documents security-relevant IAM role behavior (group profiles vs user profiles) for proper access control implementation
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/setup-projects-iam-based-domains.md b/sagemaker-unified-studio/latest/adminguide/setup-projects-iam-based-domains.md index 6552a38d4..32743d4f0 100644 --- a//sagemaker-unified-studio/latest/adminguide/setup-projects-iam-based-domains.md +++ b//sagemaker-unified-studio/latest/adminguide/setup-projects-iam-based-domains.md @@ -27,0 +28,2 @@ To create a project within an IAM-based domain, you assign project members (IAM + * During project creation, the Amazon SageMaker Unified Studio service creates the project IAM role as a group profile and adds the group as a project member. An IAM role session user profile is created for the project IAM role. Any logic that depends on the project role being present as a user profile must be updated to handle its presence as a group profile. For more information about user profiles, see [Managing users in Amazon SageMaker Unified Studio](./user-management.html). +