Connections > Amazon SageMaker AI connection properties > Connect to Amazon SageMaker AI
  

Connect to Amazon SageMaker AI

Let's configure the Amazon SageMaker AI connection properties to connect to Amazon SageMaker AI.

Before you begin

Before you get started, you'll need to get information from your Amazon SageMaker AI account based on the authentication type that you want to configure.
Check out Prepare for authentication to learn more about the authentication prerequisites.

Connection details

The following table describes the basic connection properties:
Property
Description
Connection Name
Name of the connection.
Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -,
Maximum length is 255 characters.
Description
Description of the connection. Maximum length is 4000 characters.
Use Secret Vault
Stores sensitive credentials for this connection in the secrets manager that is configured for your organization.
This property appears only if secrets manager is set up for your organization.
This property is not supported by Data Ingestion and Replication and the Data Access Management services.
When you enable the secret vault in the connection, you can select the credentials that the Secure Agent retrieves from the secrets manager. If you don't enable this option, the credentials are stored in the repository or on a local Secure Agent, depending on how your organization is configured.
Note:
If you’re using this connection to apply data access policies through pushdown or proxy services, you cannot use the Secret Vault configuration option.
For information about how to configure and use a secrets manager, see "Secrets manager configuration" in the Administrator help.
Runtime Environment
The name of the runtime environment where you want to run tasks. Select a Secure Agent, Hosted Agent, serverless, or elastic runtime environment.
Region Name
The AWS region that you use to access Amazon SageMaker.
Default is US East (N. Virginia).
Authentication Type
The authentication type to use for the connection. Choose to connect using Permanent IAM Credentials, EC2 Instance Profile, or EC2 Role to Assume Role.

Authentication types

You can configure your Amazon SageMaker AI connection to use the Permanent IAM Credentials, EC2 Instance Profile, or EC2 Role to Assume Role authentication type.
Select the required authentication type and then configure the authentication-specific parameters.

Permanent IAM Credentials authentication

Permanent IAM Credentials authentication requires the access key and the secret key of your IAM user.
The following table describes the connection properties for the Permanent IAM Credentials authentication:
Property
Description
Access Key
The AWS access key of the IAM user to connect to Amazon SageMaker AI.
Secret Key
The AWS secret key of the IAM user to connect to Amazon SageMaker AI.

EC2 Instance Profile authentication

EC2 Instance Profile authentication doesn't require any connection properties.

EC2 Role to Assume Role authentication

EC2 Role to Assume Role authentication requires the ARN of the IAM role assumed by your EC2 role. Optionally, you can specify the external ID as an advanced parameter.
The following table describes the connection properties for the EC2 Role to Assume Role authentication:
Property
Description
IAM Role ARN
The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role assumed by the EC2 role to use the dynamically generated temporary security credentials.
External ID
Advanced parameter. The external ID associated with the IAM role. External ID is a unique, user-defined string value that the IAM role requires the EC2 role to provide when calling the sts:AssumeRole API.