Posted On: Jul 9, 2018
Amazon SageMaker now supports resource tags for more efficient access control. Tags can be attached to resources such as notebook instances, training jobs, models, endpoint configurations, and endpoints within SageMaker.
Without resource tags, organizations with multiple resources and users would need to define an Amazon Resource Name (ARN) for each resource as part of the policy attached to the role or user of the resource. This could be a long and cumbersome process depending on the number of resources and users. With this new capability, access to SageMaker resources can be easily and efficiently controlled based on the environment (development versus production), specific applications, or projects, through an identifying tag. The conditions for accessing resources can be specified through IAM policies, where the access to a particular resource can be defined as part of the policy statement.
Support for resource tags in Amazon SageMaker is now available in the US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Ireland), Asia Pacific (Tokyo), and Asia Pacific (Seoul) AWS regions. For more information on resource tags for SageMaker resources, visit the product documentation here.