---
title: SageMaker Domain
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > SageMaker Domain
---

# SageMaker Domain

SageMaker Domain in AWS represents a centralized environment for managing machine learning development within Amazon SageMaker. It provides user profiles, shared storage, and security settings, enabling teams to collaborate on ML projects. A domain organizes resources like notebooks, datasets, and applications under a unified governance model, simplifying access control and administration.

```
aws.sagemaker_domain
```

## Fields

| Title                                          | ID   | Type          | Data Type                                                                                                                                                                                                                                                                     | Description |
| ---------------------------------------------- | ---- | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                                           | core | string        |
| account_id                                     | core | string        |
| app_network_access_type                        | core | string        | Specifies the VPC used for non-EFS traffic. The default value is PublicInternetOnly. PublicInternetOnly - Non-EFS traffic is through a VPC managed by Amazon SageMaker AI, which allows direct internet access VpcOnly - All traffic is through the specified VPC and subnets |
| app_security_group_management                  | core | string        | The entity that creates and manages the required security groups for inter-app communication in VPCOnly mode. Required when CreateDomain.AppNetworkAccessType is VPCOnly and DomainSettings.RStudioServerProDomainSettings.DomainExecutionRoleArn is provided.                |
| auth_mode                                      | core | string        | The domain's authentication mode.                                                                                                                                                                                                                                             |
| creation_time                                  | core | timestamp     | The creation time.                                                                                                                                                                                                                                                            |
| default_space_settings                         | core | json          | The default settings for shared spaces that users create in the domain.                                                                                                                                                                                                       |
| default_user_settings                          | core | json          | Settings which are applied to UserProfiles in this domain if settings are not explicitly specified in a given UserProfile.                                                                                                                                                    |
| domain_arn                                     | core | string        | The domain's Amazon Resource Name (ARN).                                                                                                                                                                                                                                      |
| domain_id                                      | core | string        | The domain ID.                                                                                                                                                                                                                                                                |
| domain_name                                    | core | string        | The domain name.                                                                                                                                                                                                                                                              |
| domain_settings                                | core | json          | A collection of Domain settings.                                                                                                                                                                                                                                              |
| failure_reason                                 | core | string        | The failure reason.                                                                                                                                                                                                                                                           |
| home_efs_file_system_id                        | core | string        | The ID of the Amazon Elastic File System managed by this Domain.                                                                                                                                                                                                              |
| home_efs_file_system_kms_key_id                | core | string        | Use KmsKeyId.                                                                                                                                                                                                                                                                 |
| kms_key_id                                     | core | string        | The Amazon Web Services KMS customer managed key used to encrypt the EFS volume attached to the domain.                                                                                                                                                                       |
| last_modified_time                             | core | timestamp     | The last modified time.                                                                                                                                                                                                                                                       |
| security_group_id_for_domain_boundary          | core | string        | The ID of the security group that authorizes traffic between the RSessionGateway apps and the RStudioServerPro app.                                                                                                                                                           |
| single_sign_on_application_arn                 | core | string        | The ARN of the application managed by SageMaker AI in IAM Identity Center. This value is only returned for domains created after October 1, 2023.                                                                                                                             |
| single_sign_on_managed_application_instance_id | core | string        | The IAM Identity Center managed application instance ID.                                                                                                                                                                                                                      |
| status                                         | core | string        | The status.                                                                                                                                                                                                                                                                   |
| subnet_ids                                     | core | array<string> | The VPC subnets that the domain uses for communication.                                                                                                                                                                                                                       |
| tag_propagation                                | core | string        | Indicates whether custom tag propagation is supported for the domain.                                                                                                                                                                                                         |
| tags                                           | core | hstore_csv    |
| url                                            | core | string        | The domain's URL.                                                                                                                                                                                                                                                             |
| vpc_id                                         | core | string        | The ID of the Amazon Virtual Private Cloud (VPC) that the domain uses for communication.                                                                                                                                                                                      |
