# Default settings for Amazon SageMaker AI domains
<a name="domain-set-defaults"></a>

 With SageMaker AI, you can set default settings for your resources at the Amazon SageMaker AI domain level. These default settings are used in the creation of resources within the domain. The following sections list default settings for domain and give information on using context keys when setting defaults.

**Topics**
+ [Domain default settings](#domain-set-defaults-domains)
+ [Context keys](#domain-set-defaults-context)

## Domain default settings
<a name="domain-set-defaults-domains"></a>

You can set the following defaults when creating or updating a domain. Values passed at the user profile and shared space level override defaults set at the domain level.
+ [ DefaultUserSettings ](https://docs.aws.amazon.com//sagemaker/latest/APIReference/API_UserSettings.html)
+ DefaultSpaceSettings
**Note**  
`DefaultSpaceSettings` only supports the use of JupyterLab 3 image ARNs for `SageMakerImageArn`. For more information, see [JupyterLab Versioning in Amazon SageMaker Studio Classic](studio-jl.md).

  ```
  "DefaultSpaceSettings": { 
        "ExecutionRole": "string",
        "JupyterServerAppSettings": { 
           "DefaultResourceSpec": { 
              "InstanceType": "string",
              "LifecycleConfigArn": "string",
              "SageMakerImageArn": "string",
              "SageMakerImageVersionArn": "string"
           },
           "LifecycleConfigArns": [ "string" ]
        },
        "KernelGatewayAppSettings": { 
           "CustomImages": [ 
              { 
                 "AppImageConfigName": "string",
                 "ImageName": "string",
                 "ImageVersionNumber": number
              }
           ],
           "DefaultResourceSpec": { 
              "InstanceType": "string",
              "LifecycleConfigArn": "string",
              "SageMakerImageArn": "string",
              "SageMakerImageVersionArn": "string"
           },
           "LifecycleConfigArns": [ "string" ]
        },
        "SecurityGroups": [ "string" ]
     }
  ```

## Context keys
<a name="domain-set-defaults-context"></a>

You can add context keys to the IAM policy that creates a domain. This restricts the values that users can pass for those fields. The following list shows the context keys that domain supports and where they're implemented.
+ `sagemaker:ImageArns`
  + **Implemented as part of `DefaultUserSettings`:**`SagemakerImageArn` in `DefaultUserSettings.JupyterServerAppSettings` and `DefaultUserSettings.KernelGatewayAppSettings`. `CustomImages` in `DefaultUserSettings.KernelGatewayAppSettings`.
  + **Implemented as part of `DefaultSpaceSettings`:**`SagemakerImageArn` in `DefaultSpaceSettings.JupyterServerAppSettings` and `DefaultSpaceSettings.KernelGatewayAppSettings`. `CustomImages` in `DefaultSpaceSettings.KernelGatewayAppSettings`.
+ `sagemaker:VpcSecurityGroupIds`
  + **Implemented as part of `DefaultUserSettings`:**`SecurityGroups` in `DefaultUserSettings`.
  + **Implemented as part of `DefaultSpaceSettings`:**`SecurityGroups` in `DefaultSpaceSettings`.
+ `sagemaker:DomainSharingOutputKmsKey`

  **Implemented as part of `DefaultUserSettings`:**`S3KmsKeyId` in `DefaultSpaceSettings.SharingSettings`.

 You cannot restrict users to passing incompatible values when using context keys for the defaults. For example, the values for `SageMakerImageArn` set as part of `DefaultUserSettings` and `DefaultSpaceSettings` must be compatible. You cannot set incompatible default values.