Skip to main content

News · Infrastructure

MLflow and SageMaker AI Model Registry sync expands to multi-account architectures

AWS's two-part series shows how to structure model governance across AWS accounts using hub-and-spoke and hybrid topologies.

2 min read Source: aws.amazon.com

What changed: MLflow–SageMaker AI Model Registry sync expanded with two multi-account topologies: hub-and-spoke and hybrid.

Managed MLflow on Amazon SageMaker AI automatically syncs models registered in MLflow into the SageMaker AI Model Registry. The single-account setup covered in Part 1 synchronizes four metadata categories — training metrics, evaluation results, inference specification, and lineage — and allows lifecycle stage promotion to be driven directly from the MLflow interface without requiring data scientists to leave their experimentation workflow.

Part 2 extends this foundation to multi-account environments by introducing two topologies: hub-and-spoke and hybrid. In the hub-and-spoke model, a central hub account shares the MLflow application with one or more development accounts via AWS Resource Access Manager (AWS RAM). Using external principals means accounts are not required to belong to the same AWS organization, making the arrangement accessible to external oversight environments as well.

The hybrid topology, designed for regulated sectors, keeps development accounts fully isolated from the governance hub. In this setup, a model owner in the development account approves the model locally before it is promoted to the hub. When the governance officer validates metrics and lineage and approves the model centrally in the hub, a CI/CD pipeline is triggered and an ML engineer deploys the approved model to a SageMaker endpoint.

The sync capability ships disabled by default; activation requires setting the model registration mode to AutoModelRegistrationEnabled when creating or updating an MLflow application. Multi-account setups require a one-time administrator step: configuring AWS RAM shares, bucket policies, and destination groups.

Key facts

  • Managed MLflow syncs four metadata categories into SageMaker AI Model Registry: training metrics, evaluation results, inference specification, and lineage.
  • In the hub-and-spoke topology, the central hub account shares the MLflow application with development accounts via AWS RAM; same-organization membership is not required.
  • The hybrid topology is designed for regulated environments and keeps development accounts fully isolated from the governance hub.
  • Sync is disabled by default and is activated via the AutoModelRegistrationEnabled parameter.
  • The model approval flow triggers a CI/CD pipeline, and the model is automatically deployed to a SageMaker endpoint.

Why it matters

Centralizing model governance across account boundaries in large-scale or regulated environments is now feasible with AWS RAM integration.

Watch next: The administrator setup steps and model owner approval flow for the hybrid topology warrant close attention as documentation matures.

Source date: 2026-09-08T18:21:06.288Z · Verification confidence: 85/100

Related reading

First conversation

Tell us what you want to do, and we will work out together where to start.

In the first call we talk through your business, where things stand and what matters most. We say plainly which parts make sense for us to take on and which you should run yourself.

Cookies and measurement

Apart from what the site needs to work, measurement or advertising tags only run if you allow them. No measurement tags are active on this site right now. Details