Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- {
- "Version": "2012-10-17",
- "Statement": [
- {
- "Effect": "Allow",
- "Action": [
- "sagemaker:*"
- ],
- "Resource": "*"
- },
- {
- "Effect": "Allow",
- "Action": [
- "ecr:GetAuthorizationToken",
- "ecr:GetDownloadUrlForLayer",
- "ecr:BatchGetImage",
- "ecr:BatchCheckLayerAvailability",
- "cloudwatch:PutMetricData",
- "cloudwatch:PutMetricAlarm",
- "cloudwatch:DescribeAlarms",
- "cloudwatch:DeleteAlarms",
- "ec2:CreateNetworkInterface",
- "ec2:CreateNetworkInterfacePermission",
- "ec2:DeleteNetworkInterface",
- "ec2:DeleteNetworkInterfacePermission",
- "ec2:DescribeNetworkInterfaces",
- "ec2:DescribeVpcs",
- "ec2:DescribeDhcpOptions",
- "ec2:DescribeSubnets",
- "ec2:DescribeSecurityGroups",
- "application-autoscaling:DeleteScalingPolicy",
- "application-autoscaling:DeleteScheduledAction",
- "application-autoscaling:DeregisterScalableTarget",
- "application-autoscaling:DescribeScalableTargets",
- "application-autoscaling:DescribeScalingActivities",
- "application-autoscaling:DescribeScalingPolicies",
- "application-autoscaling:DescribeScheduledActions",
- "application-autoscaling:PutScalingPolicy",
- "application-autoscaling:PutScheduledAction",
- "application-autoscaling:RegisterScalableTarget",
- "logs:CreateLogGroup",
- "logs:CreateLogStream",
- "logs:DescribeLogStreams",
- "logs:GetLogEvents",
- "logs:PutLogEvents"
- ],
- "Resource": "*"
- },
- {
- "Effect": "Allow",
- "Action": [
- "s3:GetObject",
- "s3:PutObject",
- "s3:DeleteObject"
- ],
- "Resource": [
- "arn:aws:s3:::*SageMaker*",
- "arn:aws:s3:::*Sagemaker*",
- "arn:aws:s3:::*sagemaker*"
- ]
- },
- {
- "Effect": "Allow",
- "Action": [
- "s3:CreateBucket",
- "s3:GetBucketLocation",
- "s3:ListBucket",
- "s3:ListAllMyBuckets"
- ],
- "Resource": "*"
- },
- {
- "Effect": "Allow",
- "Action": [
- "s3:GetObject"
- ],
- "Resource": "*",
- "Condition": {
- "StringEqualsIgnoreCase": {
- "s3:ExistingObjectTag/SageMaker": "true"
- }
- }
- },
- {
- "Action": "iam:CreateServiceLinkedRole",
- "Effect": "Allow",
- "Resource": "arn:aws:iam::*:role/aws-service-role/sagemaker.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_SageMakerEndpoint",
- "Condition": {
- "StringLike": {
- "iam:AWSServiceName": "sagemaker.application-autoscaling.amazonaws.com"
- }
- }
- },
- {
- "Effect": "Allow",
- "Action": [
- "iam:PassRole"
- ],
- "Resource": "*",
- "Condition": {
- "StringEquals": {
- "iam:PassedToService": "sagemaker.amazonaws.com"
- }
- }
- }
- ]
- }
Add Comment
Please, Sign In to add comment