diff --git a/cloudformation/ds_admin_detective.yaml b/cloudformation/ds_admin_detective.yaml
index 8cb8fb8..a61ab90 100644
--- a/cloudformation/ds_admin_detective.yaml
+++ b/cloudformation/ds_admin_detective.yaml
@@ -63,7 +63,7 @@ Resources:
     Properties:
       FunctionName: SageMakerVPCEnforcer
       Description: Detective control to enforce VPC attachment of SageMaker resources
-      Runtime: python3.7
+      Runtime: python3.12
       Code: vpc_detective_control.zip
       Handler: inspect_sagemaker_resource.lambda_handler
       MemorySize: 320
diff --git a/cloudformation/ds_env_studio_user_profile_v1.yaml b/cloudformation/ds_env_studio_user_profile_v1.yaml
index 753485e..c7aab0c 100644
--- a/cloudformation/ds_env_studio_user_profile_v1.yaml
+++ b/cloudformation/ds_env_studio_user_profile_v1.yaml
@@ -136,6 +136,7 @@ Resources:
               - 'sagemaker:CreateExperiment'
               - 'sagemaker:CreateModelPackage'
               - 'sagemaker:CreateModelPackageGroup'
+              - 'sagemaker:CreatePresignedDomainUrl'
               - 'sagemaker:CreateTrial'
               - 'sagemaker:CreateTrialComponent'
               - 'sagemaker:CreateApp'