Amazon SageMaker Unified Studio now allows for custom permissions boundaries on IAM roles created by its Tooling blueprint. Users can configure these boundaries using the AWS CLI to restrict AI agent capabilities and ensure that each provisioned role adheres to the specified boundary.