--- title: Amazon SageMaker notebooks now support trusted identity... description: Amazon SageMaker Notebooks now support Trusted Identity Propagation (TIP) with Amazon Athena, Amazon Redshift, and Amazon EMR Serverless. When a notebook... canonical: https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Amazon SageMaker notebooks now support trusted identity propagation | daily.dev og:description: Amazon SageMaker Notebooks now support Trusted Identity Propagation (TIP) with Amazon Athena, Amazon Redshift, and Amazon EMR Serverless. When a notebook... og:url: https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8 og:image: https://api.daily.dev/og/posts/7elX6jyb8.png og:image:alt: Amazon SageMaker notebooks now support trusted identity propagation og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Amazon SageMaker notebooks now support trusted identity propagation **[AWS](https://daily.dev/sources/aws)** · 1 min read · 0 upvotes · 0 comments ## Summary Amazon SageMaker Notebooks now support Trusted Identity Propagation (TIP) with Amazon Athena, Amazon Redshift, and Amazon EMR Serverless. When a notebook connects to a TIP-enabled compute within a TIP-enabled Project, each user's IAM Identity Center identity flows through to AWS Lake Formation, restricting visible tables, columns, and rows to what that individual's permissions allow instead of relying on a single shared execution role. This delivers per-user data boundaries, full CloudTrail audit attribution of which user accessed what data, and less admin overhead since identity propagates automatically without extra login, token, or role management. The feature is available in all AWS Regions where Amazon SageMaker Unified Studio is offered. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does trusted identity propagation work with Amazon SageMaker notebooks? When a SageMaker notebook connects to a TIP-enabled compute within a TIP-enabled Project, the individual notebook user's IAM Identity Center identity flows through to AWS Lake Formation, so that user sees only the tables, columns, and rows their own permissions allow, rather than everyone sharing one broad execution role. _Teams enforcing per-user data access on AWS can track infra changes like this via daily.dev._ ### Which AWS analytics services support trusted identity propagation from SageMaker notebooks? Amazon Athena, Amazon Redshift, and Amazon EMR Serverless support trusted identity propagation when accessed from Amazon SageMaker notebooks. This enables per-user access control enforced through AWS Lake Formation instead of a shared IAM role, along with CloudTrail audit records showing which user accessed which data. _daily.dev helps engineers evaluating AWS analytics access controls stay current on such integrations._ ### Do developers need to manage extra tokens or roles for per-user data access with SageMaker trusted identity propagation? No, identity propagates automatically through the existing compute connection once trusted identity propagation is enabled, requiring no extra login, token, or role management. This reduces administrative overhead while still enforcing per-user data boundaries and full audit attribution via CloudTrail. _Admins simplifying AWS identity management can follow updates like this through daily.dev._ ## Similar posts on daily.dev - [Amazon SageMaker supports notebooks and data agent for IdC domains](https://daily.dev/posts/amazon-sagemaker-supports-notebooks-and-data-agent-for-idc-domains-8af3bawde) · AWS · 0 upvotes · 0 comments - [New one-click onboarding and notebooks with a built-in AI agent in Amazon SageMaker Unified Studio](https://daily.dev/posts/new-one-click-onboarding-and-notebooks-with-a-built-in-ai-agent-in-amazon-sagemaker-unified-studio-azygtoxwc) · AWS · 1 upvotes · 0 comments - [Amazon SageMaker Unified Studio adds identity and user management features](https://daily.dev/posts/amazon-sagemaker-unified-studio-adds-identity-and-user-management-features-er4teem89) · AWS · 0 upvotes · 0 comments - [Connect Amazon S3 data to Databricks with Delegated IAM Permissions](https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq) · databricks · 0 upvotes · 0 comments - [AWS Adds Intelligent-Tiering and Replication for S3 Tables](https://daily.dev/posts/aws-adds-intelligent-tiering-and-replication-for-s3-tables-ku8f0ksmd) · InfoQ · 0 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#authentication](https://daily.dev/tags/authentication), [#big-data](https://daily.dev/tags/big-data) [View this post on daily.dev](https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Amazon SageMaker notebooks now support trusted identity propagation","url":"https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8"},"datePublished":"2026-08-19T21:05:53.529Z","dateModified":"2026-08-19T23:30:45.212Z","description":"Amazon SageMaker Notebooks now support Trusted Identity Propagation (TIP) with Amazon Athena, Amazon Redshift, and Amazon EMR Serverless. When a notebook...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e82c8cceed8771f89f06dfc50fa9305d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e82c8cceed8771f89f06dfc50fa9305d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"AWS","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"AWS","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/aws","url":"https://daily.dev/sources/aws"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,authentication,big-data","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"AWS","item":"https://daily.dev/sources/aws"},{"@type":"ListItem","position":3,"name":"Amazon SageMaker notebooks now support trusted identity propagation"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/amazon-sagemaker-notebooks-now-support-trusted-identity-propagation-7elx6jyb8#faq","mainEntity":[{"@type":"Question","name":"How does trusted identity propagation work with Amazon SageMaker notebooks?","acceptedAnswer":{"@type":"Answer","text":"When a SageMaker notebook connects to a TIP-enabled compute within a TIP-enabled Project, the individual notebook user's IAM Identity Center identity flows through to AWS Lake Formation, so that user sees only the tables, columns, and rows their own permissions allow, rather than everyone sharing one broad execution role. Teams enforcing per-user data access on AWS can track infra changes like this via daily.dev."}},{"@type":"Question","name":"Which AWS analytics services support trusted identity propagation from SageMaker notebooks?","acceptedAnswer":{"@type":"Answer","text":"Amazon Athena, Amazon Redshift, and Amazon EMR Serverless support trusted identity propagation when accessed from Amazon SageMaker notebooks. This enables per-user access control enforced through AWS Lake Formation instead of a shared IAM role, along with CloudTrail audit records showing which user accessed which data. daily.dev helps engineers evaluating AWS analytics access controls stay current on such integrations."}},{"@type":"Question","name":"Do developers need to manage extra tokens or roles for per-user data access with SageMaker trusted identity propagation?","acceptedAnswer":{"@type":"Answer","text":"No, identity propagates automatically through the existing compute connection once trusted identity propagation is enabled, requiring no extra login, token, or role management. This reduces administrative overhead while still enforcing per-user data boundaries and full audit attribution via CloudTrail. Admins simplifying AWS identity management can follow updates like this through daily.dev."}}]} ```