Machine Learning Connection Profiles

Defines the AWS SageMaker API authentication endpoint.

Format: https://sagemaker.<region name>.amazonaws.com

Determines the region where the AWS SageMaker jobs are located.

Determines one of the following authentication methods:

• AWS Key & Secret: Authenticates with an AWS access key and secret, which are used for services outside the AWS infrastructure.

• AWS IAM Role: Authenticates with an AWS IAM role from within the AWS infrastructure, which removes the need to provide additional credentials.

Defines the AWS SageMaker account access key.

Defines the AWS SageMaker account secret access key.

Defines the Identity and Access Management (IAM) role for the AWS SageMaker connection.

Determines whether to locate and retrieve a secret from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.

(Service Principal) Defines the Azure Active Directory (AD) API authentication endpoint.

Default: https://login.microsoftonline.com

Defines the Azure Management URL, which is used to get the token for a service principal authentication and to perform API calls.

Default: https://management.azure.com/Azure

Defines the authentication endpoint base URL for Azure Machine Learning, which is used to perform API calls, and which is based on the following format:

https://<Location_Name>.api.azureml.ms/

Determines the region where the Azure Machine Learning jobs are located.

Determines the Azure account subscription ID, which can be retrieved from the Azure portal.

Determines one of the following identity types to connect to Azure Machine Learning:

• Managed Identity: Enables you to access other Azure AD-protected resources. The identity is managed by the Azure platform and does not require you to provide credentials within Control-M. Use this option if the Agent is installed on an Azure virtual machine that has an assigned Managed Identity with the required permissions.

• Service Principal: An Azure service principal, also known as App Registration, is an identity created for use with applications, hosted services, and automated tools to access Azure resources. This access is restricted by the roles assigned to the service principal, which gives the Azure Administrator control over which resources can be accessed and at which level. Use this option if the Agent is installed on-premises or on an Azure virtual machine.

(Managed Identity) Determines whether the client ID for your managed identity is specified by the Managed Identity Client ID parameter.

Use this option if you are using the Managed Identity authentication method and you have multiple managed identities defined on your Azure virtual machine.

(Managed Identity) Determines which client ID to use as the managed identity.

This parameter requires a value only if you have multiple managed identities defined on your Azure virtual machine and you selected the Specify Managed Identity Client ID checkbox.

If you have only one managed identity, it is detected automatically.

(Service Principal) Defines the ID where the Azure Machine Learning is created.

(Service Principal) Defines the Azure identity of a Service Principal that is granted access to interact with Azure Machine Learning.

(Service Principal) Defines the password of the Service Principal.

Determines whether to locate and retrieve a secret from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.

Defines the OCI Data Science URL in the following format:

https://datascience.<region>.oci.oraclecloud.com/20190101

Determines the region where OCI Data Science is located.

Determines one of the following authentication methods:

• Defined Parameters: Defines authentication parameters in the connection profile.

• Configuration File: Uses a configuration file that contains authentication information and is stored on the Control-M/Agent.

  The following example of a configuration file defines the DEFAULT profile for Linux and the PROFILE2 profile for Windows.

  Copy

  [DEFAULT] 
  user=ocid1.user.oc1..aaaaaaaa4vcihdfhrdtyry457245636cqqcljd6yrcukszg7gzoymoyvkyupivpjfnq
  tenancy=ocid1.tenancy.oc1..aaa456y4e3yrtyue9f8djfihhwp2cu4e6t2b7lttna7rcgnhrdi4qzika
  fingerprint=9f:af:df:f5:5g:95:92:7c:34:ab:46:d3:b4:30:e6:9e
  region=us-phoenix-1
  key_file=/home/dbauser/key.pem 
  
  [PROFILE2] 
  user=ocid1.user.oc1..aaaaaaaa4v768679dfhrd8989JHGJG36cqqcljd6yrcukszg7gzoymoyvkyupivpjfnq
  tenancy=ocid1.tenancy.oc1..aaa456y4e3yrtyue987erum,gfwp2cu4e6t2b7lttna7rcgnhrdi4qzika
  fingerprint=9f:af:c0:f5:7b:95:92:7c:03:a5:46:g3:b4:38:e6:9e
  region=us-phoenix-1
  key_file=C:\\Users\\dbauser\\key.pem

Defines an individual user within the OCI environment.

Defines the OCI Tenancy ID in OCI Data Science, which is a global unique identifier for this account within the OCI environment.

Defines a fingerprint which uniquely identifies and verifies the integrity of the associated certificate or key.

Defines the Private key within a set of API signing keys that are used for authentication and secure access to OCI resources.

Determines whether to locate and retrieve a secret from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.

Defines the path to the configuration file that contains authentication information. This file is stored on the Control-M/Agent.

Defines the name of a specific section in the configuration file, such as DEFAULT and PROFILE2 in the Configuration File code sample.