SageMaker Unified Studio Supports IAM Permissions Boundaries for Tooling Blueprints
Amazon SageMaker Unified Studio now supports custom IAM permissions boundaries for roles provisioned by its Tooling blueprint. This change enables organizations with Service Control Policies (SCPs) requiring permissions boundaries to adopt SageMaker Unified Studio without compromising their security posture. It also allows administrators to enforce granular control over capabilities, such as restricting AI agent actions, by attaching customer-managed boundaries to roles like `datazone_usr_role` and Amazon Bedrock-related roles. The feature is configured at the blueprint level and applies to all projects created under it.
Features (1) ›
- Custom IAM Permissions Boundaries for SageMaker Unified Studio Roles
Amazon SageMaker Unified Studio's Tooling blueprint now supports configuring custom IAM permissions boundaries for the roles it provisions. This allows organizations to comply with Service Control Policies (SCPs) that mandate permissions boundaries on all IAM roles, preventing adoption blockers and providing granular security control over project roles, including those for AI agent capabilities.
https://aws.amazon.com/blogs/big-data/enforce-iam-permissions-boundaries-for-amazon-sagemaker-unified-studio-tooling-blueprints/
Related releases
- Amazon SageMaker HyperPod Inference Gateway for Scalable LLM Inference AWS What's New ·
- Amazon EMR on EKS now supports Spark Connect for interactive workloads AWS What's New ·
- Amazon EMR on EKS Now Supports IPv6 for Scalable Big Data Workloads AWS What's New ·
- Amazon SageMaker Unified Studio Gains Domain-Level VPC Networking AWS Big Data Blog ·
- Spark Connect now supported on Amazon EMR on EC2 for interactive PySpark AWS Big Data Blog ·
- Unlock Unstructured Data in SageMaker Catalog with Generative AI Queries AWS Big Data Blog ·