AWS Security ChangesHomeSearch

AWS sagemaker-unified-studio documentation change

Service: sagemaker-unified-studio · 2026-05-22 · Documentation low

File: sagemaker-unified-studio/latest/adminguide/configuring-user-background-sessions-for-emr-on-eks.md

Summary

Updated IAM policy attachment target from project user role to EMR on EKS system namespace role.

Security assessment

Corrects role assignment documentation without evidence of fixing a security issue. Change maintains existing security controls without introducing new vulnerabilities.

Diff

diff --git a/sagemaker-unified-studio/latest/adminguide/configuring-user-background-sessions-for-emr-on-eks.md b/sagemaker-unified-studio/latest/adminguide/configuring-user-background-sessions-for-emr-on-eks.md
index 6706e13a9..9acc5860e 100644
--- a//sagemaker-unified-studio/latest/adminguide/configuring-user-background-sessions-for-emr-on-eks.md
+++ b//sagemaker-unified-studio/latest/adminguide/configuring-user-background-sessions-for-emr-on-eks.md
@@ -13 +13 @@ When user background sessions is enabled for Amazon EMR on EKS, Amazon SageMaker
-Amazon EMR on EKS requires additional IAM permissions to enable user background sessions. You must attach the following inline IAM role policy to the IAM role created as the project user role. 
+Amazon EMR on EKS requires additional IAM permissions to enable user background sessions. You must attach the following inline IAM role policy to the IAM role created as the Amazon EMR on EKS system namespace role. 
@@ -17 +17 @@ Amazon EMR on EKS requires additional IAM permissions to enable user background
-The project user role for an Amazon SageMaker Unified Studio project is named `datazone_usr_role_`{project_id}``. 
+The Amazon EMR on EKS system namespace role for an Amazon SageMaker Unified Studio project is named `datazone_emr_containers_system_namespace_role_`{project_id}``.