Optional ReadonlyauthorizedOptional ReadonlyparameterKey-value parameter values for blueprint configuration.
Use cases: Blueprint-specific settings; Service configuration parameters
AWS: DataZone blueprint parameter values
Validation: Optional; map of parameter name to string value
Optional ReadonlyprovisioningIAM role for DataZone environment provisioning. Used for resource creation, security group management, and Lake Formation permissions during blueprint environment deployment.
Use cases: Blueprint environment provisioning; Custom provisioning role override
AWS: IAM role for DataZone environment provisioning
Validation: Optional; valid MdaaRoleRef; role needs DataZone provisioning permissions
ReadonlysubnetSubnet IDs within the VPC for the Tooling blueprint environment.
Use cases: Subnet targeting for SageMaker environments; Network placement
AWS: VPC subnets for SageMaker Tooling blueprint
Validation: Required; array of valid subnet IDs within the specified VPC
ReadonlyvpcVPC ID for the Tooling blueprint environment. Required for SageMaker domain network configuration and security group management.
Use cases: VPC-based SageMaker environment provisioning; Network isolation
AWS: VPC for SageMaker Tooling blueprint
Validation: Required; valid VPC ID
Domain unit paths authorized to use this blueprint. Uses slash-delimited paths (e.g., /root, /root/team-a).
Use cases: Blueprint access scoping; Domain unit authorization
AWS: DataZone blueprint authorization by domain unit
Validation: Optional; array of valid domain unit path strings