Amazon SageMaker (sagemaker)

2026-04-22

14 new actions, 3 new resources, 1 new condition | 5 updated actions

Additions

    Actions
  • CreateAIBenchmarkJob
    • Description:  Grants permission to create an AI benchmark job
    • Access:  Write
    • Resources: 

      Name: ai-benchmark-job

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateAIRecommendationJob
    • Description:  Grants permission to create an AI recommendation job
    • Access:  Write
    • Resources: 

      Name: ai-recommendation-job

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateAIWorkloadConfig
    • Description:  Grants permission to create an AI workload configuration
    • Access:  Write
    • Resources: 

      Name: ai-workload-config

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DeleteAIBenchmarkJob
    • Description:  Grants permission to delete an AI benchmark job
    • Access:  Write
    • Resources: 

      Name: ai-benchmark-job

      Required: Yes

  • DeleteAIRecommendationJob
    • Description:  Grants permission to delete an AI recommendation job
    • Access:  Write
    • Resources: 

      Name: ai-recommendation-job

      Required: Yes

  • DeleteAIWorkloadConfig
    • Description:  Grants permission to delete an AI workload configuration
    • Access:  Write
    • Resources: 

      Name: ai-workload-config

      Required: Yes

  • DescribeAIBenchmarkJob
    • Description:  Grants permission to describe an AI benchmark job
    • Access:  Read
    • Resources: 

      Name: ai-benchmark-job

      Required: Yes

  • DescribeAIRecommendationJob
    • Description:  Grants permission to describe an AI recommendation job
    • Access:  Read
    • Resources: 

      Name: ai-recommendation-job

      Required: Yes

  • DescribeAIWorkloadConfig
    • Description:  Grants permission to describe an AI workload configuration
    • Access:  Read
    • Resources: 

      Name: ai-workload-config

      Required: Yes

  • ListAIBenchmarkJobs
    • Description:  Grants permission to list AI benchmark jobs
    • Access:  List
  • ListAIRecommendationJobs
    • Description:  Grants permission to list AI recommendation jobs
    • Access:  List
  • ListAIWorkloadConfigs
    • Description:  Grants permission to list AI workload configurations
    • Access:  List
  • StopAIBenchmarkJob
    • Description:  Grants permission to stop an AI benchmark job
    • Access:  Write
    • Resources: 

      Name: ai-benchmark-job

      Required: Yes

  • StopAIRecommendationJob
    • Description:  Grants permission to stop an AI recommendation job
    • Access:  Write
    • Resources: 

      Name: ai-recommendation-job

      Required: Yes

    Resources
  • ai-workload-config
    • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/${AIWorkloadConfigName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      sagemaker:ResourceTag/${TagKey}

  • ai-benchmark-job
    • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/${AIBenchmarkJobName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      sagemaker:ResourceTag/${TagKey}

  • ai-recommendation-job
    • Arn:  arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/${AIRecommendationJobName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      sagemaker:ResourceTag/${TagKey}

Updates

    Actions
  • CreatePartnerApp
      Conditions
    • + sagemaker:NotebookInstanceLifecycleConfigArns
  • UpdateWorkteam
      Conditions
    • + sagemaker:NotebookInstanceLifecycleConfigArns
  • AddTags
      Resources
    • + ai-benchmark-job
    • + ai-recommendation-job
    • + ai-workload-config
  • DeleteWorkteam
      Resources
    • + ai-benchmark-job
    • + ai-recommendation-job
    • + ai-workload-config
  • PutModelPackageGroupPolicy
      Resources
    • + ai-benchmark-job
    • + ai-recommendation-job
    • + ai-workload-config