Using Amazon SageMaker Unified Studio Identity center (IDC) and IAM-based domains together

This article explains how to use Amazon SageMaker Unified Studio's IDC-based and IAM-based domains together, enabling organizations to maintain governance while accessing modern development tools.

• IDC-based domains provide comprehensive governance with identity-based authorization and Pub/Sub data sharing workflows
• IAM-based domains offer developer productivity with serverless Notebooks, Athena Spark, and improved interface
• Two integration options: reuse existing IDC project roles or create new roles with attribute-based access control tagging
• Federated roles through IAM Identity Center authenticate users for IAM-based domain access
• Permissions automatically propagate from IDC subscriptions to IAM-based domain projects via role reuse or ABAC tagging
• Data engineers access subscribed data through serverless Notebooks without duplicate approval workflows
• Maintains existing governance investments while unlocking modern analytics capabilities

This integration allows organizations to preserve established data governance frameworks while providing developers access to advanced analytics tools through a unified data experience.