AWS sagemaker-unified-studio documentation change
Summary
Added hyperlinks to SageMakerStudioAdminIAMDefaultExecutionPolicy documentation and clarified IAM policy attachment during domain management setup.
Security assessment
Improves documentation of security-critical IAM policies but doesn't introduce new security features or address vulnerabilities. Enhances clarity around existing security controls.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/accessing-domain-management-idc.md b/sagemaker-unified-studio/latest/adminguide/accessing-domain-management-idc.md index adced358f..800662f24 100644 --- a//sagemaker-unified-studio/latest/adminguide/accessing-domain-management-idc.md +++ b//sagemaker-unified-studio/latest/adminguide/accessing-domain-management-idc.md @@ -51 +51 @@ If an administration project (for example, `admin-`accountID``) already exists i - * In the AWS SageMaker console on the domain details page, choose the **Domain management** button in the banner at the top. The `SageMakerStudioAdminIAMDefaultExecutionPolicy` IAM policy is updated for the administration project's provisioning IAM role. This also runs an update project action on the administration project, which can take a few minutes to complete. Domain management is not accessible until the project update completes. + * In the AWS SageMaker console on the domain details page, choose the **Domain management** button in the banner at the top. The [SageMakerStudioAdminIAMDefaultExecutionPolicy](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioAdminIAMDefaultExecutionPolicy.html) IAM policy is updated for the administration project's provisioning IAM role. This also runs an update project action on the administration project, which can take a few minutes to complete. Domain management is not accessible until the project update completes. @@ -53 +53 @@ If an administration project (for example, `admin-`accountID``) already exists i - * You can also set up access to domain management from the Tooling blueprint. On the **Provisioning** tab, choose **Update project**. This updates the administration project's provisioning IAM role and then performs an update project action. + * You can also set up access to domain management from the Tooling blueprint. On the **Provisioning** tab, choose **Update project**. This performs an update project action to attach the [SageMakerStudioAdminIAMDefaultExecutionPolicy](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioAdminIAMDefaultExecutionPolicy.html) AWS managed policy to the administration project's execution role.