AWS sagemaker: Document MLflow Apps KMS key policy condition keys and encryption context
Summary
Renamed the 'Administrator' and 'User' policy sections to 'Administrator key policy' and 'User key policy', and added explanatory text describing the condition keys and encryption context used in the KMS key policy for MLflow Apps.
Security assessment
The change documents KMS key policy condition keys and encryption context for MLflow Apps, which governs encryption/decryption access to customer data; it is security documentation for encryption configuration rather than a fix for a specific vulnerability.
Evidence
+The following list describes the condition keys and encryption context in the preceding policy:
Diff
diff --git a/sagemaker/latest/dg/mlflow-kms.md b/sagemaker/latest/dg/mlflow-kms.md index fca448e..538d1ac 100644 --- a//sagemaker/latest/dg/mlflow-kms.md +++ b//sagemaker/latest/dg/mlflow-kms.md @@ -81 +81 @@ The following are policy statement examples you can add for MLflow Apps based on -#### Administrator +#### Administrator key policy @@ -116,0 +117,2 @@ The following policy can be used for the administrator who is creating MLflow Ap +The following list describes the condition keys and encryption context in the preceding policy: + @@ -126 +128 @@ The following policy can be used for the administrator who is creating MLflow Ap -#### User +#### User key policy