Amazon SageMaker (sagemaker)

Additions

Actions

• CallPartnerAppApi
  
  • Description:  Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases
  • Access:  Write
  • Resources: 

    Name: partner-app

    Required: Yes

• CreateClusterSchedulerConfig
  
  • Description:  Grants permission to create a cluster scheduler config
  • Access:  Write
  • Resources: 

    Name: cluster

    Required: Yes

    Name: cluster-scheduler-config

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    eks:AssociateAccessPolicy

    eks:DescribeCluster

    eks:ListAssociatedAccessPolicies

    sagemaker:AddTags

    sagemaker:DescribeCluster

• CreateComputeQuota
  
  • Description:  Grants permission to create a compute quota
  • Access:  Write
  • Resources: 

    Name: cluster

    Required: Yes

    Name: compute-quota

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    eks:AssociateAccessPolicy

    eks:DescribeCluster

    eks:ListAssociatedAccessPolicies

    sagemaker:AddTags

    sagemaker:DescribeCluster

• CreateReservedCapacity
  
  • Description:  Grants permission to create a reserved capacity
  • Access:  Write
  • Resources: 

    Name: reserved-capacity

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    sagemaker:AddTags

• CreateTrainingPlan
  
  • Description:  Grants permission to create a training plan that allocates resources for scheduling workloads within a specified time range
  • Access:  Write
  • Resources: 

    Name: training-plan

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    sagemaker:AddTags

    sagemaker:CreateReservedCapacity

• DeleteClusterSchedulerConfig
  
  • Description:  Grants permission to delete a cluster scheduler config
  • Access:  Write
  • Resources: 

    Name: cluster-scheduler-config

    Required: Yes

• DeleteComputeQuota
  
  • Description:  Grants permission to delete a compute quota
  • Access:  Write
  • Resources: 

    Name: compute-quota

    Required: Yes

• DescribeClusterSchedulerConfig
  
  • Description:  Grants permission to get information about a cluster scheduler config
  • Access:  Read
  • Resources: 

    Name: cluster-scheduler-config

    Required: Yes

• DescribeComputeQuota
  
  • Description:  Grants permission to get information about a compute quota
  • Access:  Read
  • Resources: 

    Name: compute-quota

    Required: Yes

• DescribeTrainingPlan
  
  • Description:  Grants permission to return information about a specified training plan
  • Access:  Read
  • Resources: 

    Name: training-plan

    Required: Yes

• ListClusterSchedulerConfigs
  
  • Description:  Grants permission to list cluster scheduler configs
  • Access:  List
• ListComputeQuotas
  
  • Description:  Grants permission to list compute quotas
  • Access:  List
• ListTrainingPlans
  
  • Description:  Grants permission to list all the training plans that have been created in a specified account
  • Access:  List
• SearchTrainingPlanOfferings
  
  • Description:  Grants permissions to search for the available training plan offerings that best match specified capacity requirements
  • Access:  Read
• UpdateClusterSchedulerConfig
  
  • Description:  Grants permission to update a cluster scheduler config
  • Access:  Write
  • Resources: 

    Name: cluster-scheduler-config

    Required: Yes

• UpdateComputeQuota
  
  • Description:  Grants permission to update a compute quota
  • Access:  Write
  • Resources: 

    Name: compute-quota

    Required: Yes

Resources

• training-plan
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/${TrainingPlanName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

• reserved-capacity
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/${RandomString}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

• compute-quota
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/${ComputeQuotaId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

• cluster-scheduler-config
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/${ClusterSchedulerConfigId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

Updates

Actions

• AddTags
  
  Resources
  
  • ＋ cluster-scheduler-config
  • ＋ compute-quota
  • ＋ reserved-capacity
  • ＋ training-plan
• CreateCodeRepository
  
  Resources
  
  • ＋ reserved-capacity
  • ＋ training-plan
• CreateUserProfile
  
  Resources
  
  • ＋ reserved-capacity
  • ＋ training-plan
• DeregisterDevices
  
  Resources
  
  • ＋ cluster-scheduler-config
  • ＋ compute-quota
  • ＋ reserved-capacity
  • ＋ training-plan
• PutResourcePolicy
  
  Resources
  
  • ＋ cluster-scheduler-config
  • ＋ compute-quota
  • ＋ reserved-capacity
  • ＋ training-plan
• UpdateImageVersion
  
  Resources
  
  • ＋ reserved-capacity
  • ＋ training-plan