AWS First Steps
New feature

Amazon SageMaker notebooks now support trusted identity propagation

Amazon SageMaker notebooks now support TIP, enabling per-user access control for data analytics

Amazon SageMaker notebooks now support Trusted Identity Propagation (TIP) with Amazon Athena, Amazon Redshift, and Amazon EMR Serverless. This allows each notebook user’s IAM Identity Center identity to flow through to AWS Lake Formation when connected to a TIP-enabled compute in a TIP-enabled project. Users see only the tables, columns, and rows their permissions allow, without sharing a broad execution role. TIP reduces admin effort as identity propagates automatically through existing compute connections, requiring no extra login, token, or role management.

Why it matters

Useful for developers and data engineers who need per-user data access control in data analytics and machine learning development

Read the original AWS announcement

Related articles and terms

Single Sign-On with AWS IAM Identity Center - Multi-Account Access ManagementAchieve single sign-on for multi-account environments and control access levels to each account with permission sets. Covers external IdP integration and ABAC usage.AWS Lake FormationA service that centralizes data lake construction, management, and security, providing column-level and row-level fine-grained access control for data on S3AWS IAM Identity CenterA service that provides single sign-on to multiple AWS accounts and SaaS applicationsData Lake Governance - Centralized Access Control with AWS Lake FormationLearn about building, access control, and governance for data lakes using AWS Lake Formation. This article covers fine-grained column-level and row-level permission management for S3-based data lakes, along with Glue and Athena integration.AWS Data Analytics and Data Lakes - The Integrated Ecosystem of Athena, Glue, Lake Formation, and RedshiftExplore how the integrated AWS data analytics stack of Athena, Glue, Lake Formation, Redshift, and Amazon Quick (formerly Amazon QuickSight) is put together, along with the concrete differences from Azure Synapse Analytics / Microsoft Fabric and GCP BigQuery, to clarify the axes for choosing between them.