Product logo
DocsBlogPricing

Permissions for @turbot/aws-sagemaker

Taking a look at permissions and associated grant levels for each permission for SageMaker:

PermissionGrant LevelHelp
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSubnetsMetadata
ec2:DescribeVpcsMetadata
iam:ListRolesMetadata
iam:PassRoleAdminRequired to create SageMaker instances/models.
kms:ListAliasesMetadataWhile creating NotebookInstance Amazon SageMaker uses it to encrypt data at rest on the ML storage volume which is attached to notebook instance
sagemaker:AddTagsOperator
sagemaker:CreateCodeRepositoryAdmin
sagemaker:CreateDomainAdmin
sagemaker:CreateEndpointAdmin
sagemaker:CreateEndpointConfigAdmin
sagemaker:CreateHyperParameterTuningJobAdmin
sagemaker:CreateModelAdmin
sagemaker:CreateNotebookInstanceAdmin
sagemaker:CreateNotebookInstanceLifecycleConfigAdminAdmin can create lifecycle configuration for notebook instance.
sagemaker:CreatePresignedNotebookInstanceUrlAdmin
sagemaker:CreateTrainingJobAdmin
sagemaker:CreateTransformJobAdmin
sagemaker:CreateUserProfileAdmin
sagemaker:DeleteCodeRepositoryAdmin
sagemaker:DeleteDomainAdmin
sagemaker:DeleteEndpointAdmin
sagemaker:DeleteEndpointConfigAdmin
sagemaker:DeleteModelAdmin
sagemaker:DeleteNotebookInstanceAdmin
sagemaker:DeleteNotebookInstanceLifecycleConfigAdmin
sagemaker:DeleteTagsOperator
sagemaker:DeleteUserProfileAdmin
sagemaker:DescribeEndpointMetadata
sagemaker:DescribeEndpointConfigMetadata
sagemaker:DescribeHyperParameterTuningJobMetadata
sagemaker:DescribeModelMetadata
sagemaker:DescribeNotebookInstanceMetadata
sagemaker:DescribeNotebookInstanceLifecycleConfigMetadata
sagemaker:DescribeTrainingJobMetadata
sagemaker:DescribeTransformJobMetadata
sagemaker:InvokeEndpointOperator
sagemaker:ListEndpointConfigsMetadata
sagemaker:ListEndpointsMetadata
sagemaker:ListHyperParameterTuningJobsMetadata
sagemaker:ListModelsMetadata
sagemaker:ListNotebookInstanceLifecycleConfigsMetadata
sagemaker:ListNotebookInstancesMetadata
sagemaker:ListTagsMetadata
sagemaker:ListTrainingJobsMetadata
sagemaker:ListTrainingJobsForHyperParameterTuningJobMetadata
sagemaker:ListTransformJobsMetadata
sagemaker:StartNotebookInstanceOperator
sagemaker:StopHyperParameterTuningJobOperatorOperators can stop a running hyperparameter tuning job and all running training jobs that this hyperparameter tuning job launched
sagemaker:StopNotebookInstanceOperator
sagemaker:StopTrainingJobOperator
sagemaker:StopTransformJobOperator
sagemaker:UpdateCodeRepositoryAdmin
sagemaker:UpdateDomainAdmin
sagemaker:UpdateEndpointAdmin
sagemaker:UpdateEndpointWeightsAndCapacitiesAdmin
sagemaker:UpdateNotebookInstanceAdmin
sagemaker:UpdateNotebookInstanceLifecycleConfigAdmin