ReleaseBytes
aws AWS What's New ·

SageMaker Unified Studio supports IAM permissions boundaries

securitygovernanceawsengineeraws-lambdaaws-sagemakeraws-bedrockaws-iam
feature

Amazon SageMaker Unified Studio now supports custom IAM permissions boundaries for roles provisioned with new projects. This allows organizations enforcing Service Control Policies (SCPs) to adopt SageMaker without altering security postures. Administrators can specify a permissions boundary in the Tooling blueprint, automatically applying it to all new project roles, enhancing control and simplifying compliance.

  • →Support for IAM permissions boundaries in SageMaker Unified Studio
  • →Automatic application of permissions boundaries via Tooling blueprints
  • →Availability and further information
Features (1) ›
  • Support for IAM permissions boundaries in SageMaker Unified Studio

    SageMaker Unified Studio now allows administrators to specify IAM permissions boundaries for roles provisioned with new projects. This feature ensures compliance with SCPs requiring permissions boundaries, enabling organizations to adopt SageMaker Unified Studio without compromising their security posture.

Enhancements (1) ›
  • Automatic application of permissions boundaries via Tooling blueprints

    Administrators can configure permissions boundaries within the Tooling blueprint. This configuration is automatically applied to the project user role, Amazon Bedrock service role, and Bedrock Lambda execution role created for each new project, simplifying governance and maintaining control over project-level permissions.

Notes (1) ›
  • Availability and further information

    This feature is available in all AWS Regions where Amazon SageMaker Unified Studio is supported. More details can be found in the Manage Tooling blueprint parameters documentation.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-sagemaker-scp/

Related releases