The UI teaches the system by walking the same path the runtime takes: inspect the deployed domain and projects, choose a live package target, then run the RALE flow, failure probes, and stack diagnostics in one scroll.

SageMaker resources

SageMaker Configuration

Domain identity, linked SageMaker projects, and current project membership.

Domain Not loaded

Projects Not loaded

Owner

Not loaded

Open in SageMaker

Granted scopes: *:*:*

Principal ARN	Last TAJ issued

Users

Not loaded

Open in SageMaker

Granted scopes: S3Object:*:*

Principal ARN	Last TAJ issued

Guests

Not loaded

Open in SageMaker

Granted scopes: S3Object:*:s3:GetObject

Principal ARN	Last TAJ issued

Subscriptions Not loaded

Package	Owner	Consumer	Status	ID

AWS Console Not loaded

About Reading list

Live system

RAJ Execution

Choose a package target, exercise the flow, then inspect live health.

Package Listings Not loaded

Package	Listing ID	Owner project	Asset type	Subscriptions	Use in flow

RALE Flow Reset

Step 1. Select

Package File

USL

Step 2. Authorize

Step 3. Deliver

Diagnostics

No delivery attempted yet.

Content preview

No content yet.

Failure Tests Not loaded

Stack Health Not loaded

Secret Rotation Rotate and invalidate all tokens

Hard revocation

No rotation started.

Per-token revocation is unsupported by design because deny-lists would reintroduce mutable runtime state into enforcement.