Amazon SageMaker Unified Studio now supports custom designations

Amazon SageMaker Unified Studio now supports custom specifications, allowing admins to define permission sets for project roles. Admins can create up to ten custom specs in the management portal, selecting grouped permissions for catalogs, subscriptions, connections, notebooks, and data agents. For example, a "data admin" spec may include approving subscription requests and publishing assets, while an "analyst" spec is limited to querying data and running notebooks. Each spec is defined at the domain level and can be assigned to any project within that domain. When a member performs an action, SageMaker Unified Studio evaluates the assigned spec to allow or deny the request. This enables data engineers, admins, analysts, and automation pipelines to work on the same project with different access rights, eliminating the need for separate projects for permission separation. Each domain includes two managed specs (owner and contributor), and admins can create up to ten additional specs. This feature is available in all AWS regions where Amazon SageMaker Unified Studio is offered.

Why it matters

This update is useful for organizations managing data science and machine learning projects that require finer-grained control over project member permissions.