AWS sagemaker-unified-studio documentation change
Summary
Restructured VPC networking documentation with updated prerequisites, clarified VPC lifecycle rules, added security group selection step, and removed project update options.
Security assessment
The changes document security groups as a required component for VPC configuration. While security groups are a security feature, there's no evidence this change addresses a specific vulnerability or incident.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/configure-vpc-networking-iam-based-domains.md b/sagemaker-unified-studio/latest/adminguide/configure-vpc-networking-iam-based-domains.md index c56f84a45..951fb11c9 100644 --- a//sagemaker-unified-studio/latest/adminguide/configure-vpc-networking-iam-based-domains.md +++ b//sagemaker-unified-studio/latest/adminguide/configure-vpc-networking-iam-based-domains.md @@ -7 +7 @@ -# Network settings in IAM-based domains +PrerequisitesAdd VPC @@ -9 +9 @@ -Amazon Virtual Private Cloud (Amazon VPC) networking with subnets is required when using certain compute services within Amazon SageMaker Unified Studio. You configure VPC networking at the domain level to provide network isolation and connectivity for compute resources, database connections, and other AWS services. +# Network settings @@ -11 +11 @@ Amazon Virtual Private Cloud (Amazon VPC) networking with subnets is required wh -When you configure VPC networking for your domain, all projects created after the configuration will automatically use the specified VPC. You can choose to update existing projects immediately or update them individually at a later time. +When you configure VPC networking for your domain, all projects created after the configuration will automatically use the specified VPC. You can choose to update existing projects that do not have a VPC configured — see [Update VPC configuration and projects](./update-individual-projects-vpc.html). @@ -13 +13 @@ When you configure VPC networking for your domain, all projects created after th -VPC configuration is permanent once applied to a domain and cannot be changed or removed after it is saved. +VPC configuration applies to the life of a project. VPC connection information can change the VPC itself, the subnets within, or the security group. These changes apply to projects created after the VPC is modified. @@ -15 +15 @@ VPC configuration is permanent once applied to a domain and cannot be changed or -Prerequisites: +## Prerequisites @@ -32 +32,3 @@ Prerequisites: - 1. From the domain administration page, choose **Settings** in the left navigation pane. +## Add VPC + +To add a VPC, complete the following steps: @@ -34 +36 @@ Prerequisites: - 2. In the **Networking** section, choose **Add VPC**. + 1. From the domain administration page, choose **Settings** in the left navigation pane. @@ -36 +38 @@ Prerequisites: - 3. In the **Add VPC** dialog, review the warning message that VPC configuration cannot be changed after it is added. + 2. In the **Networking** section, choose **Add VPC**. IAM-based domains support only one VPC configuration at a time. Identity Center-based domains can have a VPC per Region to support accounts that are associated with the domain. @@ -38 +40 @@ Prerequisites: - 4. In the **VPC** section, choose **Select** and select the VPC where your compute resources will be housed. + 3. In the **VPC** section, choose **Select** and select the VPC where your compute resources will be housed. @@ -44 +46 @@ If no VPC has been set up for use with Amazon SageMaker Unified Studio, you can - 5. In the **Subnets** section, choose **Select** and select at least two subnets in different Availability Zones. + 4. In the **Subnets** section, choose **Select** and select at least two subnets in different Availability Zones. @@ -50,5 +52 @@ Your subnets must be private or some functionality will not be available. Select - 6. In the **Project update option** section, choose one of the following: - - * Update all projects immediately - All existing projects will be updated automatically after saving. This may take a few minutes for domains with more than 20 projects. - - * Update projects separately - Go to each project detail page and manually update projects with the VPC configuration. + 5. In the **Security group** section, select a security group. If a security group is not selected, the service creates one for the VPC. @@ -56 +54 @@ Your subnets must be private or some functionality will not be available. Select - 7. Choose **Save & Update**. + 6. Choose **Save**. @@ -69 +67 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Configure VPC Networking for Amazon SageMaker Unified Studio Domain +VPC networking @@ -71 +69 @@ Configure VPC Networking for Amazon SageMaker Unified Studio Domain -Update Individual Projects with VPC Configuration +Update VPC configuration and projects