AWS Clean Rooms ML (cleanrooms-ml)

Additions

Actions

• CancelTrainedModel
  
  • Description:  Grants permission to cancel a trained model
  • Access:  Write
  • Resources: 

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CancelTrainedModelInferenceJob
  
  • Description:  Grants permission to cancel a trained model inference job
  • Access:  Write
  • Resources: 

    Name: TrainedModelInferenceJob

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateConfiguredModelAlgorithm
  
  • Description:  Grants permission to create a configured model algorithm
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateConfiguredModelAlgorithmAssociation
  
  • Description:  Grants permission to create a configured model algorithm association
  • Access:  Write
  • Resources: 

    Name: ConfiguredModelAlgorithm

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateMLInputChannel
  
  • Description:  Grants permission to create an ML input channel
  • Access:  Write
  • Resources: 

    Name: ConfiguredModelAlgorithmAssociation

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateTrainedModel
  
  • Description:  Grants permission to create a trained model
  • Access:  Write
  • Resources: 

    Name: ConfiguredModelAlgorithmAssociation

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteConfiguredModelAlgorithm
  
  • Description:  Grants permission to delete a configured model algorithm
  • Access:  Write
  • Resources: 

    Name: ConfiguredModelAlgorithm

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteConfiguredModelAlgorithmAssociation
  
  • Description:  Grants permission to delete a configured model algorithm association
  • Access:  Write
  • Resources: 

    Name: ConfiguredModelAlgorithmAssociation

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteMLConfiguration
  
  • Description:  Grants permission to delete an ML configuration
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteMLInputChannelData
  
  • Description:  Grants permission to delete all data associated with the ML input channel
  • Access:  Write
  • Resources: 

    Name: MLInputChannel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteTrainedModelOutput
  
  • Description:  Grants permission to delete all output associated with the trained model
  • Access:  Write
  • Resources: 

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• GetCollaborationConfiguredModelAlgorithmAssociation
  
  • Description:  Grants permission to return information about a configured model algorithm association created by any member in the collaboration
  • Access:  Read
  • Resources: 

    Name: ConfiguredModelAlgorithmAssociation

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• GetCollaborationMLInputChannel
  
  • Description:  Grants permission to return information about an ML input channel created by any member in the collaboration
  • Access:  Read
  • Resources: 

    Name: MLInputChannel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• GetCollaborationTrainedModel
  
  • Description:  Grants permission to return information about a trained model created by any member in the collaboration
  • Access:  Read
  • Resources: 

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• GetConfiguredModelAlgorithm
  
  • Description:  Grants permission to return information about a configured model algorithm
  • Access:  Read
  • Resources: 

    Name: ConfiguredModelAlgorithm

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• GetConfiguredModelAlgorithmAssociation
  
  • Description:  Grants permission to return information about a configured model algorithm association
  • Access:  Read
  • Resources: 

    Name: ConfiguredModelAlgorithmAssociation

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• GetMLConfiguration
  
  • Description:  Grants permission to return information about an ML configuration
  • Access:  Read
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• GetMLInputChannel
  
  • Description:  Grants permission to return information about an ML input channel
  • Access:  Read
  • Resources: 

    Name: MLInputChannel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• GetTrainedModel
  
  • Description:  Grants permission to return information about a trained model
  • Access:  Read
  • Resources: 

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• GetTrainedModelInferenceJob
  
  • Description:  Grants permission to return information about a trained model inference job
  • Access:  Read
  • Resources: 

    Name: TrainedModelInferenceJob

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• ListCollaborationConfiguredModelAlgorithmAssociations
  
  • Description:  Grants permission to return a list of configured model algorithms created by any member in the collaboration
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• ListCollaborationMLInputChannels
  
  • Description:  Grants permission to return a list of ML input channels created by any member in the collaboration
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• ListCollaborationTrainedModelExportJobs
  
  • Description:  Grants permission to return a list of trained model export jobs started by any member in the collaboration
  • Access:  List
  • Resources: 

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• ListCollaborationTrainedModelInferenceJobs
  
  • Description:  Grants permission to return a list of trained model inference jobs started by any member in the collaboration
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• ListCollaborationTrainedModels
  
  • Description:  Grants permission to return a list of trained models created by any member in the collaboration
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    cleanrooms-ml:CollaborationId

• ListConfiguredModelAlgorithmAssociations
  
  • Description:  Grants permission to return a list of configured model algorithm associations
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• ListConfiguredModelAlgorithms
  
  • Description:  Grants permission to return a list of configured model algorithms
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• ListMLInputChannels
  
  • Description:  Grants permission to return a list of ML input channels
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• ListTrainedModelInferenceJobs
  
  • Description:  Grants permission to return a list of trained model inference jobs
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• ListTrainedModels
  
  • Description:  Grants permission to return a list of trained models
  • Access:  List
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• PutMLConfiguration
  
  • Description:  Grants permission to put an ML configuration
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• StartTrainedModelExportJob
  
  • Description:  Grants permission to start a trained model export job
  • Access:  Write
  • Resources: 

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• StartTrainedModelInferenceJob
  
  • Description:  Grants permission to start a trained model inference job
  • Access:  Write
  • Resources: 

    Name: ConfiguredModelAlgorithmAssociation

    Required: Yes

    Name: MLInputChannel

    Required: Yes

    Name: TrainedModel

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

Resources

• ConfiguredModelAlgorithm
  
  • Arn:  arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• ConfiguredModelAlgorithmAssociation
  
  • Arn:  arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/configured-model-algorithm-association/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• MLInputChannel
  
  • Arn:  arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/ml-input-channel/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• TrainedModel
  
  • Arn:  arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/trained-model/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• TrainedModelInferenceJob
  
  • Arn:  arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/trained-model-inference-job/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}