Amazon SageMaker Unified Studio adds identity and user management features

Amazon SageMaker Unified Studio Updates

New administration features provide enhanced control over identity configuration and user management for IAM and Identity Center domain types.

SageMaker IAM Domains

• Single Sign-On Configuration: Administrators can configure AWS IAM Identity Center for onboarding users through single sign-on.
• User Management: Administrators can add IAM roles, IAM users, IAM Identity Center users, and IAM Identity Center groups as project members.
• Consolidated User View: A new domain user management page offers a consolidated view of all active users, enabling access and permission management from a single screen.

SageMaker Identity Center Domains

• Federated Access: Users can access the SageMaker Unified Studio portal by federating through an IAM role.
• Unique User Sessions: Each federated user gets a unique session, preventing work overwriting.
• Action Auditing: Administrators can audit individual actions even when multiple users share a single IAM role.

What to do

• Configure IAM Identity Center integration in the SageMaker Unified Studio admin portal.
• Manage users and permissions from the new domain user management page.
• Enable federated access for users in Identity Center domains.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.