Amazon SageMaker (sagemaker)

Additions

Actions

• CreateAIBenchmarkJob
  
  • Description:  Grants permission to create an AI benchmark job
  • Access:  Write
  • Resources: 

    Name: ai-benchmark-job

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateAIRecommendationJob
  
  • Description:  Grants permission to create an AI recommendation job
  • Access:  Write
  • Resources: 

    Name: ai-recommendation-job

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateAIWorkloadConfig
  
  • Description:  Grants permission to create an AI workload configuration
  • Access:  Write
  • Resources: 

    Name: ai-workload-config

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteAIBenchmarkJob
  
  • Description:  Grants permission to delete an AI benchmark job
  • Access:  Write
  • Resources: 

    Name: ai-benchmark-job

    Required: Yes

• DeleteAIRecommendationJob
  
  • Description:  Grants permission to delete an AI recommendation job
  • Access:  Write
  • Resources: 

    Name: ai-recommendation-job

    Required: Yes

• DeleteAIWorkloadConfig
  
  • Description:  Grants permission to delete an AI workload configuration
  • Access:  Write
  • Resources: 

    Name: ai-workload-config

    Required: Yes

• DescribeAIBenchmarkJob
  
  • Description:  Grants permission to describe an AI benchmark job
  • Access:  Read
  • Resources: 

    Name: ai-benchmark-job

    Required: Yes

• DescribeAIRecommendationJob
  
  • Description:  Grants permission to describe an AI recommendation job
  • Access:  Read
  • Resources: 

    Name: ai-recommendation-job

    Required: Yes

• DescribeAIWorkloadConfig
  
  • Description:  Grants permission to describe an AI workload configuration
  • Access:  Read
  • Resources: 

    Name: ai-workload-config

    Required: Yes

• ListAIBenchmarkJobs
  
  • Description:  Grants permission to list AI benchmark jobs
  • Access:  List
• ListAIRecommendationJobs
  
  • Description:  Grants permission to list AI recommendation jobs
  • Access:  List
• ListAIWorkloadConfigs
  
  • Description:  Grants permission to list AI workload configurations
  • Access:  List
• StopAIBenchmarkJob
  
  • Description:  Grants permission to stop an AI benchmark job
  • Access:  Write
  • Resources: 

    Name: ai-benchmark-job

    Required: Yes

• StopAIRecommendationJob
  
  • Description:  Grants permission to stop an AI recommendation job
  • Access:  Write
  • Resources: 

    Name: ai-recommendation-job

    Required: Yes

Resources

• ai-workload-config
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/${AIWorkloadConfigName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

• ai-benchmark-job
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/${AIBenchmarkJobName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

• ai-recommendation-job
  
  • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/${AIRecommendationJobName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    sagemaker:ResourceTag/${TagKey}

Conditions

• sagemaker:NotebookInstanceLifecycleConfigArns
  
  • Description:  Filters access by the list of notebook instance lifecycle configuration ARNs associated with the resource in the request
  • Type:  ArrayOfARN

Updates

Actions

• CreatePartnerApp
  
  Conditions
  
  • ＋ sagemaker:NotebookInstanceLifecycleConfigArns
• UpdateWorkteam
  
  Conditions
  
  • ＋ sagemaker:NotebookInstanceLifecycleConfigArns
• AddTags
  
  Resources
  
  • ＋ ai-benchmark-job
  • ＋ ai-recommendation-job
  • ＋ ai-workload-config
• DeleteWorkteam
  
  Resources
  
  • ＋ ai-benchmark-job
  • ＋ ai-recommendation-job
  • ＋ ai-workload-config
• PutModelPackageGroupPolicy
  
  Resources
  
  • ＋ ai-benchmark-job
  • ＋ ai-recommendation-job
  • ＋ ai-workload-config