Sagemaker

🟢 Low | Source: AWS What’s New Amazon SageMaker Unified Studio has added localisation support for twelve languages, allowing the interface to display in the user’s preferred language based on browser settings or manual selection. This is a usability enhancement with no direct security implications. It is available across all AWS regions where SageMaker Unified Studio is supported. Architect’s Take: No security action is required for this update. Architects should note that language localisation does not affect IAM permissions, domain configurations, or access controls — existing governance and access policies remain unchanged. ...

🟢 Low | Source: AWS What’s New Amazon SageMaker Studio’s quick setup time has been reduced from over two minutes to under twenty seconds. New Studio environments now automatically receive a managed IAM policy granting serverless model customisation permissions, including fine-tuning, evaluation, and deployment to SageMaker or Bedrock endpoints. This reduces friction for ML practitioners but introduces pre-configured IAM permissions that security teams should review. Architect’s Take: Review the scope of the automatically attached AmazonSageMakerModelCustomizationCoreAccess managed policy against your least-privilege baselines — auto-provisioned IAM policies with deployment permissions to Bedrock and SageMaker endpoints may exceed what individual users or teams require. Consider whether your landing zone or Service Control Policies should restrict or audit automatic policy attachment in SageMaker Studio environments. ...