AWS sagemaker medium security documentation change
Summary
Updated condition key from 'sagemaker:VolumeKmsKey' to 'sagemaker:VolumeKmsKeyArn' in encryption policy example.
Security assessment
Corrects policy syntax to ensure proper encryption configuration, preventing misconfiguration that could bypass volume encryption.
Diff
diff --git a/sagemaker/latest/dg/security_iam_id-based-policy-examples.md b/sagemaker/latest/dg/security_iam_id-based-policy-examples.md index eb0439fd8..b7477b40b 100644 --- a//sagemaker/latest/dg/security_iam_id-based-policy-examples.md +++ b//sagemaker/latest/dg/security_iam_id-based-policy-examples.md @@ -960 +960 @@ JSON -The following policy restricts a user to specify a AWS KMS key to encrypt input data using the `sagemaker:VolumeKmsKey` condition key when creating: +The following policy restricts a user to specify a AWS KMS key to encrypt input data using the `sagemaker:VolumeKmsKeyArn` condition key when creating: