SageMaker HyperPod 多租户共享方案
AWS 机器学习博客发布了一套参考架构,介绍多个团队如何共享同一个 Amazon SageMaker HyperPod(EKS)GPU 集群,同时保持隔离与资源公平。方案以 AWS IAM Identity Center 做集中认证(可联合 Microsoft Entra ID,通过 SCIM 同步与 SAML 2.0 登录),为每个团队分配独立的 SageMaker AI 域和执行角色,并用 Kubernetes 命名空间隔离工作负载。资源分配由 HyperPod Task Governance 负责,配合命名空间级成本分摊实现按团队计费可见性;存储使用 FSx for Lustre 或 OpenZFS 的分团队目录以及 S3 桶。
对企业而言,这一蓝图展示了在共享昂贵 GPU 基础设施时兼顾隔离、公平与成本归因的常见做法。
Multiple teams within the same company increasingly need shared access to expensive GPU clusters for their generative AI operations, while maintaining isolation boundaries, resource fairness, and operational independence. Consider a data science team training large language models, a computer vision group running inference workloads, and a research team experimenting with new model architectures. All of them might need access to the same cluster. Without a well-designed multi-tenant (multi-team) architecture, organizations face uncontrolled resource consumption, weak isolation between teams, an inability to attribute shared GPU costs to the teams that incur them, and administrative overhead that slows down innovation.
Amazon SageMaker HyperPod is a purpose-built AI service that simplifies the management of large-scale compute clusters for gen AI workloads. It provides resilient, optimized clusters orchestrated by Amazon Elastic Kubernetes Service (Amazon EKS) or Slurm, so organizations can run distributed training, interactive development, and model inference at scale. At the same time, it automatically handles node health monitoring, fault recovery, and cluster lifecycle management.
In this post, we present a reference architecture for building a multi-tenant environment on Amazon SageMaker HyperPod with EKS. This architecture uses AWS IAM Identity Center for centralized authentication, per-team SageMaker AI domains for a tailored user experience, Kubernetes namespaces for workload isolation, HyperPod Task Governance for fair resource allocation, and namespace-level cost allocation for per-team spend visibility and chargeback. By the end of this post, you will have a clear blueprint for multiple teams to efficiently share a single HyperPod EKS cluster.
#Amazon SageMaker HyperPod#Amazon EKS#AWS IAM Identity Center#Amazon SageMaker Studio#Amazon FSx for Lustre#Amazon S3#Microsoft Entra ID#Kubernetes