AIToday
Audio & SpeechAmazon AI BlogPublished: Jul 28, 2026, 04:00 JST

Deepgram integrates AWS IAM temporary delegation for SageMaker support access

Deepgram integrates AWS IAM temporary delegation for SageMaker support access

3 Key Points

  1. What happened

    Deepgram has integrated IAM temporary delegation, a new AWS IAM capability, into its support workflow for customers running Deepgram speech AI models on Amazon SageMaker AI. The integration allows Deepgram engineers to request time-limited, scoped access to customer endpoints and logs directly from the support ticketing system, with customers approving requests in their own IAM console.

  2. Why it matters

    This replaces the previous model of long-lived cross-account IAM roles, which required recurring provisioning and audit conversations. Deepgram has reduced the time for initial investigation on a SageMaker AI support ticket from days to minutes, since customers can now approve access in their IAM console rather than scheduling screen-shares. Every delegated API call is tagged in AWS CloudTrail with Deepgram's partner account ID for full auditability.

  3. What to watch

    Credentials issued through the integration expire automatically after twelve hours, and customers can revoke access at any time before expiration. The integration requires an active Deepgram support contract, an enabled AWS CloudTrail trail in the region where the SageMaker AI endpoint runs, and AWS infrastructure charges for SageMaker AI endpoint hosting, Amazon CloudWatch logs, AWS CloudTrail, and networking (Deepgram offers a 14-day trial at no additional cost for its models, but AWS infrastructure costs apply from the start of deployment).

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

Deepgram's self-hosted deployment on Amazon SageMaker AI addresses a core enterprise requirement: running speech AI models within a customer's own AWS account for data residency, network isolation, and regulatory compliance—without sacrificing the operational maturity of a managed cloud service. The body describes how Deepgram has invested across three dimensions: AWS Marketplace listings with one-click subscription, validated reference architectures covering VPC isolation and auto-scaling, and Terraform modules that platform teams can layer onto existing infrastructure.

The support access problem solved by IAM temporary delegation reflects a tension at the heart of self-hosted deployments. When a model misbehaves or an endpoint autoscales unexpectedly, the engineer best positioned to diagnose the issue is often on the Deepgram side—but that engineer has no access to the customer's VPC. The traditional remedies all carried operational costs: long-lived cross-account IAM roles required recurring audit and revocation conversations; screen-shares and copy-pasted logs were slow and audit-unfriendly; asking customers to run commands on behalf of Deepgram did not scale. IAM temporary delegation addresses all three drawbacks by issuing scoped, time-limited credentials directly in the customer's IAM console, with every action tagged for audit and zero standing trust between accounts.

FAQ
How long does delegated access last?
Credentials expire automatically after twelve hours. Customers can revoke access at any time before expiration by choosing Revoke on the delegation request in the IAM console.
What permissions does a Deepgram engineer get through the integration?
The integration grants read-only access to exactly one Amazon CloudWatch log group and one DescribeEndpoint resource for the customer's specified SageMaker AI endpoint. Every resource ARN is fully resolved with no wildcards, and the customer can review the complete permissions before approving.
What Deepgram models are available on SageMaker AI?
Deepgram offers AWS Marketplace listings for Nova, Flux, and Aura-2, which cover speech-to-text (STT) and text-to-speech (TTS) models.
Amazon AI BlogRead Original Article

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleNvidia's $5B stake in Nebius sparks 19% stock jump