AWS sagemaker-unified-studio documentation change
Summary
Added entry for SageMakerStudioProjectRoleMachineLearningPolicy update with new datazone:CreateAsset* permissions
Security assessment
This update explicitly documents IAM permission changes in a security-specific file. While it adds security documentation, the change itself enables feature functionality (scheduling notebook runs) rather than addressing a security vulnerability.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-updates.md b/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-updates.md index 801a74f0c..341c45952 100644 --- a//sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-updates.md +++ b//sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-updates.md @@ -12,0 +13 @@ Change | Description | Date +Policy update - [SageMakerStudioProjectRoleMachineLearningPolicy](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioProjectRoleMachineLearningPolicy) | Policy updates to SageMakerStudioProjectRoleMachineLearningPolicy - adding `datazone:CreateAsset*` permissions to the DataZoneUserPermissions statement to support scheduling notebook runs using the Data Agent. | 05/21/2026