feat(client-sagemaker): This release enables administrators to attribute user activity and API calls from Studio notebooks, Data Wrangler and Canvas to specific users even when users share the same execution IAM role. ExecutionRoleIdentityConfig at Sagemaker domain level enables this feature.

awstools · awstools · commit 8e57ba3a0d8d · 2022-09-02T18:27:35.000Z
diff --git a/clients/client-sagemaker/src/models/models_0.ts b/clients/client-sagemaker/src/models/models_0.ts
@@ -7860,6 +7860,11 @@ export interface UserSettings {
   RSessionAppSettings?: RSessionAppSettings;
 }
 
+export enum ExecutionRoleIdentityConfig {
+  DISABLED = "DISABLED",
+  USER_PROFILE_NAME = "USER_PROFILE_NAME",
+}
+
 /**
  * <p>A collection of settings that configure the <code>RStudioServerPro</code> Domain-level
  *             app.</p>
@@ -7904,6 +7909,12 @@ export interface DomainSettings {
    *             app.</p>
    */
   RStudioServerProDomainSettings?: RStudioServerProDomainSettings;
+
+  /**
+   * <p>The configuration for attaching a SageMaker user profile name to the execution role as a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html">
+   *                <code>sts:SourceIdentity</code> key</a>.</p>
+   */
+  ExecutionRoleIdentityConfig?: ExecutionRoleIdentityConfig | string;
 }
 
 export interface CreateDomainRequest {
@@ -9832,16 +9843,6 @@ export enum TrainingJobEarlyStoppingType {
   OFF = "Off",
 }
 
-/**
- * <p>The job completion criteria.</p>
- */
-export interface TuningJobCompletionCriteria {
-  /**
-   * <p>The value of the objective metric.</p>
-   */
-  TargetObjectiveMetricValue: number | undefined;
-}
-
 /**
  * @internal
  */
@@ -11344,10 +11345,3 @@ export const ParameterRangesFilterSensitiveLog = (obj: ParameterRanges): any =>
 export const ResourceLimitsFilterSensitiveLog = (obj: ResourceLimits): any => ({
   ...obj,
 });
-
-/**
- * @internal
- */
-export const TuningJobCompletionCriteriaFilterSensitiveLog = (obj: TuningJobCompletionCriteria): any => ({
-  ...obj,
-});
diff --git a/clients/client-sagemaker/src/models/models_1.ts b/clients/client-sagemaker/src/models/models_1.ts
@@ -102,12 +102,21 @@ import {
   TransformJobDefinition,
   TransformOutput,
   TransformResources,
-  TuningJobCompletionCriteria,
   UserContext,
   UserSettings,
   VpcConfig,
 } from "./models_0";
 
+/**
+ * <p>The job completion criteria.</p>
+ */
+export interface TuningJobCompletionCriteria {
+  /**
+   * <p>The value of the objective metric.</p>
+   */
+  TargetObjectiveMetricValue: number | undefined;
+}
+
 /**
  * <p>Configures a hyperparameter tuning job.</p>
  */
@@ -9161,12 +9170,12 @@ export interface DescribeFlowDefinitionRequest {
   FlowDefinitionName: string | undefined;
 }
 
-export enum FlowDefinitionStatus {
-  ACTIVE = "Active",
-  DELETING = "Deleting",
-  FAILED = "Failed",
-  INITIALIZING = "Initializing",
-}
+/**
+ * @internal
+ */
+export const TuningJobCompletionCriteriaFilterSensitiveLog = (obj: TuningJobCompletionCriteria): any => ({
+  ...obj,
+});
 
 /**
  * @internal
diff --git a/clients/client-sagemaker/src/models/models_2.ts b/clients/client-sagemaker/src/models/models_2.ts
@@ -33,6 +33,7 @@ import {
   ContainerDefinition,
   ContextSummary,
   EdgeOutputConfig,
+  ExecutionRoleIdentityConfig,
   FeatureDefinition,
   FeatureType,
   FlowDefinitionOutputConfig,
@@ -83,7 +84,6 @@ import {
   ExperimentSource,
   FeatureGroupStatus,
   FeatureParameter,
-  FlowDefinitionStatus,
   HumanTaskConfig,
   HyperParameterTrainingJobDefinition,
   HyperParameterTuningJobConfig,
@@ -142,6 +142,13 @@ import {
   TrialComponentStatus,
 } from "./models_1";
 
+export enum FlowDefinitionStatus {
+  ACTIVE = "Active",
+  DELETING = "Deleting",
+  FAILED = "Failed",
+  INITIALIZING = "Initializing",
+}
+
 export interface DescribeFlowDefinitionResponse {
   /**
    * <p>The Amazon Resource Name (ARN) of the flow defintion.</p>
@@ -4269,6 +4276,12 @@ export interface DomainSettingsForUpdate {
    *             update.</p>
    */
   RStudioServerProDomainSettingsForUpdate?: RStudioServerProDomainSettingsForUpdate;
+
+  /**
+   * <p>The configuration for attaching a SageMaker user profile name to the execution role as a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html">
+   *                <code>sts:SourceIdentity</code> key</a>. This configuration can only be modified if there are no apps in the <code>InService</code> or <code>Pending</code> state.</p>
+   */
+  ExecutionRoleIdentityConfig?: ExecutionRoleIdentityConfig | string;
 }
 
 /**
@@ -8803,75 +8816,6 @@ export interface ListNotebookInstancesInput {
   AdditionalCodeRepositoryEquals?: string;
 }
 
-/**
- * <p>Provides summary information for an SageMaker notebook instance.</p>
- */
-export interface NotebookInstanceSummary {
-  /**
-   * <p>The name of the notebook instance that you want a summary for.</p>
-   */
-  NotebookInstanceName: string | undefined;
-
-  /**
-   * <p>The Amazon Resource Name (ARN) of the notebook instance.</p>
-   */
-  NotebookInstanceArn: string | undefined;
-
-  /**
-   * <p>The status of the notebook instance.</p>
-   */
-  NotebookInstanceStatus?: NotebookInstanceStatus | string;
-
-  /**
-   * <p>The URL that you use to connect to the Jupyter notebook running in your notebook
-   *             instance. </p>
-   */
-  Url?: string;
-
-  /**
-   * <p>The type of ML compute instance that the notebook instance is running on.</p>
-   */
-  InstanceType?: _InstanceType | string;
-
-  /**
-   * <p>A timestamp that shows when the notebook instance was created.</p>
-   */
-  CreationTime?: Date;
-
-  /**
-   * <p>A timestamp that shows when the notebook instance was last modified.</p>
-   */
-  LastModifiedTime?: Date;
-
-  /**
-   * <p>The name of a notebook instance lifecycle configuration associated with this notebook
-   *             instance.</p>
-   *         <p>For information about notebook instance lifestyle configurations, see <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/notebook-lifecycle-config.html">Step
-   *                 2.1: (Optional) Customize a Notebook Instance</a>.</p>
-   */
-  NotebookInstanceLifecycleConfigName?: string;
-
-  /**
-   * <p>The Git repository associated with the notebook instance as its default code
-   *             repository. This can be either the name of a Git repository stored as a resource in your
-   *             account, or the URL of a Git repository in <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html">Amazon Web Services CodeCommit</a>
-   *             or in any other Git repository. When you open a notebook instance, it opens in the
-   *             directory that contains this repository. For more information, see <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/nbi-git-repo.html">Associating Git
-   *                 Repositories with SageMaker Notebook Instances</a>.</p>
-   */
-  DefaultCodeRepository?: string;
-
-  /**
-   * <p>An array of up to three Git repositories associated with the notebook instance. These
-   *             can be either the names of Git repositories stored as resources in your account, or the
-   *             URL of Git repositories in <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html">Amazon Web Services CodeCommit</a>
-   *             or in any other Git repository. These repositories are cloned at the same level as the
-   *             default repository of your notebook instance. For more information, see <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/nbi-git-repo.html">Associating Git
-   *                 Repositories with SageMaker Notebook Instances</a>.</p>
-   */
-  AdditionalCodeRepositories?: string[];
-}
-
 /**
  * @internal
  */
@@ -10612,10 +10556,3 @@ export const ListNotebookInstanceLifecycleConfigsOutputFilterSensitiveLog = (
 export const ListNotebookInstancesInputFilterSensitiveLog = (obj: ListNotebookInstancesInput): any => ({
   ...obj,
 });
-
-/**
- * @internal
- */
-export const NotebookInstanceSummaryFilterSensitiveLog = (obj: NotebookInstanceSummary): any => ({
-  ...obj,
-});
diff --git a/clients/client-sagemaker/src/models/models_3.ts b/clients/client-sagemaker/src/models/models_3.ts
@@ -97,7 +97,7 @@ import {
   MetricData,
   ModelPackageGroupStatus,
   ModelPackageStatusDetails,
-  NotebookInstanceSummary,
+  NotebookInstanceStatus,
   PipelineExecutionStatus,
   PipelineExperimentConfig,
   PipelineStatus,
@@ -120,6 +120,75 @@ import {
   Workteam,
 } from "./models_2";
 
+/**
+ * <p>Provides summary information for an SageMaker notebook instance.</p>
+ */
+export interface NotebookInstanceSummary {
+  /**
+   * <p>The name of the notebook instance that you want a summary for.</p>
+   */
+  NotebookInstanceName: string | undefined;
+
+  /**
+   * <p>The Amazon Resource Name (ARN) of the notebook instance.</p>
+   */
+  NotebookInstanceArn: string | undefined;
+
+  /**
+   * <p>The status of the notebook instance.</p>
+   */
+  NotebookInstanceStatus?: NotebookInstanceStatus | string;
+
+  /**
+   * <p>The URL that you use to connect to the Jupyter notebook running in your notebook
+   *             instance. </p>
+   */
+  Url?: string;
+
+  /**
+   * <p>The type of ML compute instance that the notebook instance is running on.</p>
+   */
+  InstanceType?: _InstanceType | string;
+
+  /**
+   * <p>A timestamp that shows when the notebook instance was created.</p>
+   */
+  CreationTime?: Date;
+
+  /**
+   * <p>A timestamp that shows when the notebook instance was last modified.</p>
+   */
+  LastModifiedTime?: Date;
+
+  /**
+   * <p>The name of a notebook instance lifecycle configuration associated with this notebook
+   *             instance.</p>
+   *         <p>For information about notebook instance lifestyle configurations, see <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/notebook-lifecycle-config.html">Step
+   *                 2.1: (Optional) Customize a Notebook Instance</a>.</p>
+   */
+  NotebookInstanceLifecycleConfigName?: string;
+
+  /**
+   * <p>The Git repository associated with the notebook instance as its default code
+   *             repository. This can be either the name of a Git repository stored as a resource in your
+   *             account, or the URL of a Git repository in <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html">Amazon Web Services CodeCommit</a>
+   *             or in any other Git repository. When you open a notebook instance, it opens in the
+   *             directory that contains this repository. For more information, see <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/nbi-git-repo.html">Associating Git
+   *                 Repositories with SageMaker Notebook Instances</a>.</p>
+   */
+  DefaultCodeRepository?: string;
+
+  /**
+   * <p>An array of up to three Git repositories associated with the notebook instance. These
+   *             can be either the names of Git repositories stored as resources in your account, or the
+   *             URL of Git repositories in <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html">Amazon Web Services CodeCommit</a>
+   *             or in any other Git repository. These repositories are cloned at the same level as the
+   *             default repository of your notebook instance. For more information, see <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/nbi-git-repo.html">Associating Git
+   *                 Repositories with SageMaker Notebook Instances</a>.</p>
+   */
+  AdditionalCodeRepositories?: string[];
+}
+
 export interface ListNotebookInstancesOutput {
   /**
    * <p>If the response to the previous <code>ListNotebookInstances</code> request was
@@ -4986,6 +5055,13 @@ export interface SearchRequest {
   MaxResults?: number;
 }
 
+/**
+ * @internal
+ */
+export const NotebookInstanceSummaryFilterSensitiveLog = (obj: NotebookInstanceSummary): any => ({
+  ...obj,
+});
+
 /**
  * @internal
  */
diff --git a/clients/client-sagemaker/src/protocols/Aws_json1_1.ts b/clients/client-sagemaker/src/protocols/Aws_json1_1.ts
@@ -911,7 +911,6 @@ import {
   TransformOutput,
   TransformResources,
   TransformS3DataSource,
-  TuningJobCompletionCriteria,
   UiTemplate,
   USD,
   UserContext,
@@ -1186,6 +1185,7 @@ import {
   TrialComponentArtifact,
   TrialComponentParameterValue,
   TrialComponentStatus,
+  TuningJobCompletionCriteria,
   UiConfig,
   WorkforceVpcConfigRequest,
 } from "../models/models_1";
@@ -1407,7 +1407,6 @@ import {
   MonitoringSchedule,
   MonitoringScheduleSummary,
   NotebookInstanceLifecycleConfigSummary,
-  NotebookInstanceSummary,
   ObjectiveStatusCounters,
   OidcConfigForResponse,
   PipelineExperimentConfig,
@@ -1471,6 +1470,7 @@ import {
   ModelPackageGroup,
   ModelStepMetadata,
   NestedFilters,
+  NotebookInstanceSummary,
   Parameter,
   Parent,
   Pipeline,
@@ -18135,6 +18135,9 @@ const serializeAws_json1_1DomainSecurityGroupIds = (input: string[], context: __
 
 const serializeAws_json1_1DomainSettings = (input: DomainSettings, context: __SerdeContext): any => {
   return {
+    ...(input.ExecutionRoleIdentityConfig != null && {
+      ExecutionRoleIdentityConfig: input.ExecutionRoleIdentityConfig,
+    }),
     ...(input.RStudioServerProDomainSettings != null && {
       RStudioServerProDomainSettings: serializeAws_json1_1RStudioServerProDomainSettings(
         input.RStudioServerProDomainSettings,
@@ -18149,6 +18152,9 @@ const serializeAws_json1_1DomainSettings = (input: DomainSettings, context: __Se
 
 const serializeAws_json1_1DomainSettingsForUpdate = (input: DomainSettingsForUpdate, context: __SerdeContext): any => {
   return {
+    ...(input.ExecutionRoleIdentityConfig != null && {
+      ExecutionRoleIdentityConfig: input.ExecutionRoleIdentityConfig,
+    }),
     ...(input.RStudioServerProDomainSettingsForUpdate != null && {
       RStudioServerProDomainSettingsForUpdate: serializeAws_json1_1RStudioServerProDomainSettingsForUpdate(
         input.RStudioServerProDomainSettingsForUpdate,
@@ -26931,6 +26937,7 @@ const deserializeAws_json1_1DomainSecurityGroupIds = (output: any, context: __Se
 
 const deserializeAws_json1_1DomainSettings = (output: any, context: __SerdeContext): DomainSettings => {
   return {
+    ExecutionRoleIdentityConfig: __expectString(output.ExecutionRoleIdentityConfig),
     RStudioServerProDomainSettings:
       output.RStudioServerProDomainSettings != null
         ? deserializeAws_json1_1RStudioServerProDomainSettings(output.RStudioServerProDomainSettings, context)
diff --git a/codegen/sdk-codegen/aws-models/sagemaker.json b/codegen/sdk-codegen/aws-models/sagemaker.json
