---
type: resource-type
title: SageMakerDomain
description: aws resource type AWS::SageMaker::Domain
name: SageMakerDomain
lexicon: aws
resource_type: AWS::SageMaker::Domain
---
`AWS::SageMaker::Domain`, a resource type of the aws lexicon.

## Properties

- `AuthMode` (`"IAM" | "SSO"`, required): The mode of authentication that members use to access the domain.
- `DefaultUserSettings` (`SageMakerDomain_UserSettings`, required): The default user settings.
- `DomainName` (`string`, required): A name for the domain.
- `AppNetworkAccessType` (`"PublicInternetOnly" | "VpcOnly"`, optional): Specifies the VPC used for non-EFS traffic. The default value is PublicInternetOnly.
- `AppSecurityGroupManagement` (`"Customer" | "Service"`, optional): The entity that creates and manages the required security groups for inter-app communication in VPCOnly mode. Required when CreateDomain.AppNetworkAccessType is VPCOnly and DomainSettings.RStudioServerProDomainSettings.DomainExecutionRoleArn is provided.
- `DefaultSpaceSettings` (`SageMakerDomain_DefaultSpaceSettings`, optional): The default space settings.
- `DomainArn` (`string`, optional): The Amazon Resource Name (ARN) of the created domain.
- `DomainId` (`string`, optional): The domain name.
- `DomainSettings` (`SageMakerDomain_DomainSettings`, optional)
- `HomeEfsFileSystemCreation` (`"Disabled" | "Enabled"`, optional): Indicates whether a home EFS file system is created for the domain. Set to Disabled to skip EFS creation and reduce domain creation time.
- `HomeEfsFileSystemId` (`string`, optional): The ID of the Amazon Elastic File System (EFS) managed by this Domain.
- `KmsKeyId` (`string`, optional): SageMaker uses AWS KMS to encrypt the EFS volume attached to the domain with an AWS managed customer master key (CMK) by default.
- `SecurityGroupIdForDomainBoundary` (`string`, optional): The ID of the security group that authorizes traffic between the RSessionGateway apps and the RStudioServerPro app.
- `SingleSignOnApplicationArn` (`string`, optional): The ARN of the application managed by SageMaker in IAM Identity Center. This value is only returned for domains created after October 1, 2023.
- `SingleSignOnManagedApplicationInstanceId` (`string`, optional): The SSO managed application instance ID.
- `SubnetIds` (`string[]`, optional): The VPC subnets that Studio uses for communication.
- `TagPropagation` (`"DISABLED" | "ENABLED"`, optional): Indicates whether the tags added to Domain, User Profile and Space entity is propagated to all SageMaker resources.
- `Tags` (`SageMakerDomain_Tag[]`, optional): A list of tags to apply to the user profile.
- `Url` (`string`, optional): The URL to the created domain.
- `VpcId` (`string`, optional): The ID of the Amazon Virtual Private Cloud (VPC) that Studio uses for communication.

## Attributes

- `DomainArn`
- `DomainId`
- `HomeEfsFileSystemId`
- `SecurityGroupIdForDomainBoundary`
- `SingleSignOnApplicationArn`
- `SingleSignOnManagedApplicationInstanceId`
- `Url`